|
Server IP : 109.234.166.131 / Your IP : 216.73.216.44 Web Server : LiteSpeed System : Linux garfish.o2switch.net 4.18.0-553.62.1.lve.el8.x86_64 #1 SMP Mon Jul 21 17:50:35 UTC 2025 x86_64 User : bean7936 ( 1010) PHP Version : 8.3.31 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON Directory (0750) : /home/bean7936/access-logs/ |
| [ Home ] | [ C0mmand ] | [ Upload File ] |
|---|
103.199.85.118 - - [29/Apr/2026:11:48:29 +0200] "GET /ztukvivl.php HTTP/1.1" 200 140 "http://voscarnets.bean7936.odns.fr/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 103.199.85.118 - - [29/Apr/2026:11:48:30 +0200] "GET /Readme_30f8.txt HTTP/1.1" 200 84 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 103.199.85.118 - - [29/Apr/2026:11:48:30 +0200] "POST /ztukvivl.php HTTP/1.1" 200 393 "http://voscarnets.bean7936.odns.fr/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 103.199.85.118 - - [29/Apr/2026:12:08:13 +0200] "GET /ztukvivl.php HTTP/1.1" 200 140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 103.199.85.118 - - [29/Apr/2026:12:08:14 +0200] "POST /ztukvivl.php HTTP/1.1" 200 396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 103.199.85.118 - - [29/Apr/2026:12:08:14 +0200] "GET /readme_aa7e.php?bd=bdkr25372hjfsskskl HTTP/1.1" 200 9881 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 51.195.201.11 - - [29/Apr/2026:12:32:30 +0200] "GET /Readme_30f8.txt HTTP/1.1" 200 84 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/131.0.2903.86" 91.134.43.151 - - [29/Apr/2026:12:42:34 +0200] "GET /Readme_30f8.txt HTTP/1.1" 200 84 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 91.134.43.151 - - [29/Apr/2026:12:43:03 +0200] "GET /favicon.ico HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 91.134.43.151 - - [29/Apr/2026:12:49:04 +0200] "GET /Readme_30f8.txt HTTP/1.1" 200 84 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 91.134.43.151 - - [29/Apr/2026:12:49:04 +0200] "GET /favicon.ico HTTP/1.1" 404 1251 "https://voscarnets.bean7936.odns.fr/Readme_30f8.txt" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 91.134.43.151 - - [29/Apr/2026:12:49:49 +0200] "GET /favicon.ico HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:10:52 +0200] "GET /444.php HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:12:02 +0200] "GET /woh.php HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:12:33 +0200] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:12:37 +0200] "GET /first.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:12:45 +0200] "GET /wp-content/banners/about.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:12:45 +0200] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:13:03 +0200] "GET /admin.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 51.75.141.254 - - [29/Apr/2026:14:14:02 +0200] "GET / HTTP/1.1" 200 13454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:14:07 +0200] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:14:27 +0200] "GET /goat.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:14:49 +0200] "GET /dropdown.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 103.160.68.141 - - [29/Apr/2026:13:37:41 +0200] "GET /favicon.ico HTTP/1.1" 404 1251 "http://voscarnets.bean7936.odns.fr/readme.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 185.62.188.4 - - [29/Apr/2026:13:39:52 +0200] "GET /readme.txt HTTP/1.1" 200 46 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) QtWebEngine/5.13.1 Chrome/73.0.3683.105 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:10:31 +0200] "GET /504.php HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:11:50 +0200] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:12:59 +0200] "GET /1.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:13:22 +0200] "GET /cgi-bin/wp-login.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:13:33 +0200] "GET /wp-includes/images/wp-login.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:13:47 +0200] "GET /login.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:13:51 +0200] "GET /hehehehe.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:13:55 +0200] "GET /simple.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:14:14 +0200] "GET /lv.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:14:24 +0200] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:14:37 +0200] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:14:48 +0200] "GET /Mshell.php HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:14:55 +0200] "GET /sad/about.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:15:10 +0200] "GET /444.php HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:14:59 +0200] "GET /504.php HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:15:00 +0200] "GET /first.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:15:02 +0200] "GET /radio.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:15:03 +0200] "GET /wp-admin/admin.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:15:05 +0200] "GET /admin.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:15:10 +0200] "GET /classwithtostring.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:15:14 +0200] "GET /install.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:15:25 +0200] "GET /log-mama/function.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:15:37 +0200] "GET /wp-login.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:16:07 +0200] "GET /lock.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:16:12 +0200] "GET /index/function.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:16:28 +0200] "GET /cong.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:16:45 +0200] "GET /about/function.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:17:39 +0200] "GET /admin.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:17:42 +0200] "GET /smtp.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:17:54 +0200] "GET /file.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:17:59 +0200] "GET /themes.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 91.134.43.151 - - [29/Apr/2026:12:42:34 +0200] "GET /Readme_30f8.txt HTTP/1.1" 200 84 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Mobile Safari/537.36" 103.160.68.141 - - [29/Apr/2026:13:37:40 +0200] "GET /readme.txt HTTP/1.1" 200 46 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:12:15 +0200] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:12:56 +0200] "GET /asd.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:13:05 +0200] "GET /ws.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:14:24 +0200] "GET /content.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:14:41 +0200] "GET /themes.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:15:13 +0200] "GET /admin.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:15:22 +0200] "GET /wp-content/x/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:15:44 +0200] "GET /bk/index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:16:33 +0200] "GET /wp-content/plugins/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:16:49 +0200] "GET /ioxi-o.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:16:57 +0200] "GET /wp-admin/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:17:11 +0200] "GET /about.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:17:17 +0200] "GET /file17.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:17:28 +0200] "GET /cgi-bin/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:18:17 +0200] "GET /wp-content/plugins/ioxi/alfa-ioxi.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:18:12 +0200] "GET /log-mama/function.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:18:16 +0200] "GET /admin.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:18:19 +0200] "GET /bk/index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:18:28 +0200] "GET /wp-content/plugins/hanau/akc.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:18:37 +0200] "GET /admin.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:18:42 +0200] "GET /.well-known/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:18:46 +0200] "GET /wp-admin/network/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:19:04 +0200] "GET /images/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:19:14 +0200] "GET /wp-content/plugins/deu/ms.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:19:18 +0200] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:19:29 +0200] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:19:32 +0200] "GET /wp-content/plugins/view-ad/ms.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:21:37 +0200] "GET /1index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:21:49 +0200] "GET /wso.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:22:02 +0200] "GET /ws.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:22:29 +0200] "GET /2021.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:22:46 +0200] "GET /xleet.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:22:51 +0200] "GET /shellalfa.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:18:23 +0200] "GET /wp-admin/user/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:18:29 +0200] "GET /themes.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:18:36 +0200] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:18:51 +0200] "GET /wp-content/plugins/geu/geu.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:18:58 +0200] "GET /themes/seotheme/mar.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:19:07 +0200] "GET /wp-content/plugins/ango/cong.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:19:20 +0200] "GET /wp-content/plugins/ango/sett.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:22:07 +0200] "GET /wso2.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:22:17 +0200] "GET /2022.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:22:35 +0200] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:22:41 +0200] "GET /alfashell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:23:01 +0200] "GET /xxx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:23:14 +0200] "GET /x.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:23:26 +0200] "GET /file.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:23:35 +0200] "GET /files.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:24:08 +0200] "GET /ru.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:24:19 +0200] "GET /if.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:24:27 +0200] "GET /xxl.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:24:34 +0200] "GET /vuln.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:24:53 +0200] "GET /skipper.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:24:56 +0200] "GET /x.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:16:19 +0200] "GET /.well-known/content.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:17:18 +0200] "GET /themes.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:17:22 +0200] "GET /wp-mail.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:17:32 +0200] "GET /wp-content/plugins/admin.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:17:38 +0200] "GET /woh.php HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:18:03 +0200] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:18:26 +0200] "GET /raw.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:18:34 +0200] "GET /goat1.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:18:48 +0200] "GET /aw.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:20:49 +0200] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:23:47 +0200] "GET /xl2023x.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:25:16 +0200] "GET /Mshell.php HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:25:57 +0200] "GET /xl.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:27:11 +0200] "GET /c99.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:28:13 +0200] "GET /404.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:28:22 +0200] "GET /swm.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:29:04 +0200] "GET /edit-form.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:29:12 +0200] "GET /LEAF.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:23:19 +0200] "GET /xl2023.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:23:50 +0200] "GET /shell4.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:24:00 +0200] "GET /ups.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:24:59 +0200] "GET /skippershell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:25:11 +0200] "GET /tttt.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:25:24 +0200] "GET /tshop.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:25:40 +0200] "GET /alfa.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:26:06 +0200] "GET /inje3ctor.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:26:51 +0200] "GET /uploader.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:26:55 +0200] "GET /up.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:27:01 +0200] "GET /hacked.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:27:45 +0200] "GET /cmd13.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:28:09 +0200] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:28:47 +0200] "GET /shx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:29:27 +0200] "GET /leafmailer.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:29:27 +0200] "GET /ioxi-o.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:29:34 +0200] "GET /mailer.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:29:41 +0200] "GET /leafmailer2.8.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:30:00 +0200] "GET /file.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:30:08 +0200] "GET /x.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:30:12 +0200] "GET /images/iR7SzrsOUEP.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:30:42 +0200] "GET /XxX.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:26:15 +0200] "GET /saudi.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:26:23 +0200] "GET /wso.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:26:34 +0200] "GET /alfashell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:26:41 +0200] "GET /my_alfa.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:27:27 +0200] "GET /priv8.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:27:36 +0200] "GET /Navir.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:27:53 +0200] "GET /inc20k1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:28:04 +0200] "GET /1index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:28:39 +0200] "GET /doc.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:28:53 +0200] "GET /ws.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:28:58 +0200] "GET /m.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:30:55 +0200] "GET /alex.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:31:05 +0200] "GET /new.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:31:06 +0200] "GET /wp-content/plugins/view-ad/ms.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:31:19 +0200] "GET /gaza.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:31:39 +0200] "GET /3index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:31:42 +0200] "GET /wikindex.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:31:59 +0200] "GET /xleet-shell.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:31:59 +0200] "GET /Lux.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:32:31 +0200] "GET /ru.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:32:31 +0200] "GET /admin-heade.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:32:44 +0200] "GET /vuln.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:32:53 +0200] "GET /skipper.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:29:50 +0200] "GET /Leaf.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:29:54 +0200] "GET /file17.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:30:01 +0200] "GET /leaf.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:30:14 +0200] "GET /srx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:30:19 +0200] "GET /wp-content/plugins/hanau/akc.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:30:21 +0200] "GET /1337.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:30:29 +0200] "GET /xx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:30:31 +0200] "GET /aw.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:30:42 +0200] "GET /wp-content/plugins/geu/geu.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:30:47 +0200] "GET /lf.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:31:10 +0200] "GET /marijuana.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:31:32 +0200] "GET /wp-content/plugins/work-list/lang.php HTTP/1.1" 404 1251 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:31:44 +0200] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:32:06 +0200] "GET /haxor.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:32:27 +0200] "GET /ups.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:32:36 +0200] "GET /if.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:33:03 +0200] "GET /skippershell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:33:18 +0200] "GET /tshop.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:34:40 +0200] "GET /Navir.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:35:18 +0200] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 404 1251 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:31:01 +0200] "GET /wp-content/plugins/deu/ms.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:31:47 +0200] "GET /wso1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:31:53 +0200] "GET /bb.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:32:16 +0200] "GET /shell4.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:32:37 +0200] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 1251 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:33:11 +0200] "GET /tttt.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:33:15 +0200] "GET /wp-content/plugins/work-list/lang.php HTTP/1.1" 404 1251 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:33:24 +0200] "GET /alfa.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:33:36 +0200] "GET /inje3ctor.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:33:48 +0200] "GET /wso.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:33:59 +0200] "GET /iR7SzrsOUEP.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:34:00 +0200] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 1251 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:34:06 +0200] "GET /uploader.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:34:15 +0200] "GET /up.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:34:51 +0200] "GET /inc20k1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:35:07 +0200] "GET /404.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:35:33 +0200] "GET /php.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:35:56 +0200] "GET /root.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:36:04 +0200] "GET /toor.pho HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:36:09 +0200] "GET /bot.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:36:23 +0200] "GET /shx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:33:09 +0200] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:33:41 +0200] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 404 1251 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:33:43 +0200] "GET /saudi.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:33:55 +0200] "GET /alfashell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:34:03 +0200] "GET /my_alfa.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:34:26 +0200] "GET /hacked.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:34:29 +0200] "GET /c99.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:34:35 +0200] "GET /priv8.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:34:48 +0200] "GET /cmd13.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:35:02 +0200] "GET /1index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:35:12 +0200] "GET /swm.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:35:37 +0200] "GET /gif.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:36:17 +0200] "GET /doc.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:36:33 +0200] "GET /m.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:36:49 +0200] "GET /leafmailer.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:37:06 +0200] "GET /leafmailer2.8.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:37:18 +0200] "GET /phpsender.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:37:21 +0200] "GET /smtp.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:37:25 +0200] "GET /leaf_php.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:37:51 +0200] "GET /leaf.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:37:55 +0200] "GET /x.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:38:13 +0200] "GET /1337.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:38:27 +0200] "GET /XxX.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:36:44 +0200] "GET /LEAF.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:37:41 +0200] "GET /leaf_mailer.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:38:05 +0200] "GET /srx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:38:19 +0200] "GET /xx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:38:34 +0200] "GET /lf.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:39:11 +0200] "GET /3index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:39:50 +0200] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:39:57 +0200] "GET /wp-content/plugins/zaen/includes/loadme.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:40:05 +0200] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:40:10 +0200] "GET /wp-content/plugins/cakil/up.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:40:37 +0200] "GET /wp-content/plugins/cekidot/mr.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:40:44 +0200] "GET /black.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:35:23 +0200] "GET /mini.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:35:46 +0200] "GET /simple.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:36:25 +0200] "GET /ws.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:36:39 +0200] "GET /edit-form.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:36:55 +0200] "GET /mailer.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:37:14 +0200] "GET /php_sender.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:37:31 +0200] "GET /php.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:37:45 +0200] "GET /Leaf.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:38:48 +0200] "GET /new.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:38:54 +0200] "GET /marijuana.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:39:00 +0200] "GET /gaza.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:39:23 +0200] "GET /wso1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:39:27 +0200] "GET /bb.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:39:35 +0200] "GET /Lux.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:40:24 +0200] "GET /wp-content/plugins/ubh/con.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:40:28 +0200] "GET /wp-content/plugins/cache-wordpress/payment.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:40:48 +0200] "GET /wp-content/plugins/wp-freeform/black2llleaf.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:40:51 +0200] "GET /wpvitamins.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:38:40 +0200] "GET /alex.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:39:17 +0200] "GET /wikindex.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:39:43 +0200] "GET /haxor.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:41:06 +0200] "GET /blog/fw.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:42:11 +0200] "GET /alfa.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:42:44 +0200] "GET /module.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:43:30 +0200] "GET /ovshell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:43:36 +0200] "GET /alfanibos.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:43:49 +0200] "GET /message.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:43:51 +0200] "GET /asd.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:43:55 +0200] "GET /ws.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:44:00 +0200] "GET /cgi-bin/wp-login.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:44:15 +0200] "GET /hehehehe.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:44:21 +0200] "GET /shx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:44:34 +0200] "GET /lv.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:44:46 +0200] "GET /wiki-index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:44:47 +0200] "GET /goat.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:44:54 +0200] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:45:02 +0200] "GET /wp-content/plugins/owfsmac/mar.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:45:05 +0200] "GET /sad/about.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:45:14 +0200] "GET /wso.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:45:20 +0200] "GET /c99.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:45:27 +0200] "GET /tersembunyi.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:41:13 +0200] "GET /wordpress/fw.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:41:41 +0200] "GET /f0x.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:41:54 +0200] "GET /wp-content/f0x.ph HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:43:24 +0200] "GET /kil.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:44:04 +0200] "GET /wp-includes/images/wp-login.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:44:12 +0200] "GET /alex.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:44:13 +0200] "GET /login.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:44:20 +0200] "GET /simple.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:44:44 +0200] "GET /content.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:44:45 +0200] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:44:57 +0200] "GET /srx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:45:03 +0200] "GET /dropdown.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:45:16 +0200] "GET /classwithtostring.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:45:18 +0200] "GET /wp-content/x/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:45:35 +0200] "GET /index/function.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:45:36 +0200] "GET /.well-known/content.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:45:42 +0200] "GET /wp-content/plugins/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:45:47 +0200] "GET /1.aspx HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:42:50 +0200] "GET /Init.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:43:10 +0200] "GET /shx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:43:42 +0200] "GET /ms.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:43:47 +0200] "GET /wp-content/banners/about.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:43:54 +0200] "GET /1.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:44:03 +0200] "GET /wikiindex.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:44:44 +0200] "GET /xindex.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:44:50 +0200] "GET /Bulle.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:45:10 +0200] "GET /radio.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:45:11 +0200] "GET /wp-admin/admin.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:45:16 +0200] "GET /install.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:45:24 +0200] "GET /wp-login.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:45:33 +0200] "GET /lock.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:45:39 +0200] "GET /cong.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:45:44 +0200] "GET /about/function.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:45:58 +0200] "GET /a.aspx HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:46:00 +0200] "GET /wp-mail.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:46:30 +0200] "GET /goat1.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:46:44 +0200] "GET /upl.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:45:34 +0200] "GET /lab.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:45:38 +0200] "GET /plugins.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:45:48 +0200] "GET /wp-admin/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:45:52 +0200] "GET /about.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:45:53 +0200] "GET /shell.aspx HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:45:58 +0200] "GET /themes.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:46:00 +0200] "GET /cgi-bin/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:46:01 +0200] "GET /wp-content/plugins/admin.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:46:19 +0200] "GET /lyda.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:46:33 +0200] "GET /.well-known/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:46:34 +0200] "GET /wp-admin/network/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:46:38 +0200] "GET /goods.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:46:44 +0200] "GET /images/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:47:07 +0200] "GET /gelay.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:47:22 +0200] "GET /gel4y.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:47:39 +0200] "GET /yo.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:48:12 +0200] "GET /images/1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:48:32 +0200] "GET /images/fox.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:48:42 +0200] "GET /images/alfa.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:48:47 +0200] "GET /images/alfashell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:46:01 +0200] "GET /admin.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:46:23 +0200] "GET /wp-content/plugins/ioxi/alfa-ioxi.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:46:24 +0200] "GET /alfashell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:46:25 +0200] "GET /wp-admin/user/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:46:31 +0200] "GET /av.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:46:48 +0200] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:46:50 +0200] "GET /login.phtml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:46:50 +0200] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:46:59 +0200] "GET /fox.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:47:29 +0200] "GET /contacts.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:47:55 +0200] "GET //images/sym.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:48:09 +0200] "GET /images/mar.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:48:16 +0200] "GET /images/wp-init.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:48:37 +0200] "GET /images/fw.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:49:06 +0200] "GET /images/bypass.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:49:40 +0200] "GET /images/leafmailer2.8.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:49:43 +0200] "GET /images/priv8.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:49:59 +0200] "GET /w3llstore.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:50:34 +0200] "GET /mailer.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:50:42 +0200] "GET /Ninja.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:50:54 +0200] "GET /snd21.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:48:52 +0200] "GET /images/gelay.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:49:01 +0200] "GET /images/byps.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:49:20 +0200] "GET /images/leaf.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:49:26 +0200] "GET /images/wso.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:49:35 +0200] "GET /images/sym403.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:49:47 +0200] "GET /images/lux.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:50:03 +0200] "GET /alfi.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:51:04 +0200] "GET /tuco.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:51:07 +0200] "GET /radio.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:51:17 +0200] "GET /wsanon.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:52:28 +0200] "GET /xleet.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:52:51 +0200] "GET /xl2023x.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:53:11 +0200] "GET /x.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:54:28 +0200] "GET /alf4.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:54:38 +0200] "GET /pop.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:56:39 +0200] "GET /yyyy.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:56:42 +0200] "GET /alfa1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:56:52 +0200] "GET /2.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:56:56 +0200] "GET /3.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:57:04 +0200] "GET /5.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:57:19 +0200] "GET /tesla1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:57:21 +0200] "GET /7.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:57:24 +0200] "GET /8.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:47:14 +0200] "GET /darkshell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:47:59 +0200] "GET /images/shell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:48:04 +0200] "GET /images/mini.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:48:24 +0200] "GET /images/upload.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:48:27 +0200] "GET /images/up.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:49:15 +0200] "GET /images/c99.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:49:17 +0200] "GET /images/x.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:49:49 +0200] "GET /images/wp.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:49:52 +0200] "GET /xxx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:50:10 +0200] "GET /DC.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:50:52 +0200] "GET /fpebr.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:51:09 +0200] "GET /ice.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:53:32 +0200] "GET /xl.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:54:15 +0200] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:54:24 +0200] "GET /Alfashell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:54:44 +0200] "GET /leafmailer.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:55:03 +0200] "GET /fox1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:56:26 +0200] "GET /ym.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:56:33 +0200] "GET /1945.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:56:47 +0200] "GET /159.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:57:09 +0200] "GET /6.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:57:29 +0200] "GET /10.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:57:42 +0200] "GET /1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:50:59 +0200] "GET /olu.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:51:13 +0200] "GET /codeboy1877x.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:51:21 +0200] "GET /Alfa.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:52:39 +0200] "GET /xl2023.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:52:58 +0200] "GET /xxl.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:54:21 +0200] "GET /Alfawso.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:54:32 +0200] "GET /old-index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:55:08 +0200] "GET /yhr.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:57:01 +0200] "GET /4.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:57:36 +0200] "GET /xz.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:57:38 +0200] "GET /hexor.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:57:47 +0200] "GET /01.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:57:54 +0200] "GET /leaf.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:57:56 +0200] "GET /404.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:58:07 +0200] "GET /foxwsov1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:58:17 +0200] "GET /foxwsov2.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:58:31 +0200] "GET /1index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:58:37 +0200] "GET /3index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:58:38 +0200] "GET /4index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:58:46 +0200] "GET /8index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:58:48 +0200] "GET /9index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:58:57 +0200] "GET /index4.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:58:58 +0200] "GET /index5.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:58:00 +0200] "GET /upl.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:58:04 +0200] "GET /FoxWSOv1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:58:12 +0200] "GET /FoxWSOv2.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:58:28 +0200] "GET /upload.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:58:35 +0200] "GET /2index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:58:41 +0200] "GET /5index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:58:43 +0200] "GET /6index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:58:44 +0200] "GET /7index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:58:50 +0200] "GET /index1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:58:52 +0200] "GET /index2.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:59:30 +0200] "GET /indeex.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:59:33 +0200] "GET /jindex.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:59:44 +0200] "GET /up.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:00:56 +0200] "GET /images/about.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:01:46 +0200] "GET /.well-known/leafmailer.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:01:55 +0200] "GET /.well-known/am.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:02:07 +0200] "GET /about.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:02:20 +0200] "GET /images/shell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:02:25 +0200] "GET /images/fw.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:02:34 +0200] "GET /images/404.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:02:48 +0200] "GET /images/x.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:03:31 +0200] "GET /load.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:04:44 +0200] "GET /priv8.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:05:01 +0200] "GET /alfa.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:57:26 +0200] "GET /9.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:57:32 +0200] "GET /shadowx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:57:50 +0200] "GET /haxor.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:58:26 +0200] "GET /shellx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:58:54 +0200] "GET /index3.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:59:14 +0200] "GET /index9.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:59:20 +0200] "GET /indexx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:00:51 +0200] "GET /.well-known/about.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:01:30 +0200] "GET /tgh.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:01:40 +0200] "GET /.well-known/404.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:01:43 +0200] "GET /.well-known/leaf.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:01:51 +0200] "GET /.well-known/leafmailer2.8.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:01:52 +0200] "GET /.well-known/x.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:01:59 +0200] "GET /.well-known/about.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:02:03 +0200] "GET /.well-known/maro.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:02:36 +0200] "GET /images/leaf.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:02:45 +0200] "GET /images/leafmailer2.8.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:02:49 +0200] "GET /images/1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:02:57 +0200] "GET /images/mar.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:03:39 +0200] "GET /images/am.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:04:08 +0200] "GET /sym403.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:04:41 +0200] "GET /symlink.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:04:56 +0200] "GET /foxwso.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:05:08 +0200] "GET /sh3ll.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:59:00 +0200] "GET /index6.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:59:03 +0200] "GET /index7.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:14:59:12 +0200] "GET /index8.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:00:13 +0200] "GET /.well-known/upl.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:00:18 +0200] "GET /images/upl.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:01:01 +0200] "GET /wp-admin/about.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:01:31 +0200] "GET /.well-known/mari.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:01:32 +0200] "GET /.well-known/gelay.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:01:33 +0200] "GET /.well-known/shell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:01:35 +0200] "GET /.well-known/fw.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:01:38 +0200] "GET /.well-known/a.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:02:10 +0200] "GET /am.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:02:14 +0200] "GET /images/mari.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:02:17 +0200] "GET /images/gelay.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:02:28 +0200] "GET /images/a.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:02:39 +0200] "GET /images/leafmailer.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:02:52 +0200] "GET /images/sym403.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:02:55 +0200] "GET /images/sym.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:03:01 +0200] "GET /wpx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:04:52 +0200] "GET /bypass403.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:05:22 +0200] "GET /mini.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:05:58 +0200] "GET /raw.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:06:21 +0200] "GET /wordpress/32.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:06:33 +0200] "GET /doc.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:05:48 +0200] "GET /xleetmailer.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:06:03 +0200] "GET /twins.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:06:07 +0200] "GET /45.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:06:11 +0200] "GET /alf42.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:06:39 +0200] "GET /mas.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:06:48 +0200] "GET /73.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:40:51 +0200] "GET /.well-known/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:42:25 +0200] "GET /.well-known/acme-challenge/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:44:39 +0200] "GET /.well-known/acme-challenge/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:45:24 +0200] "GET /uploads/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:45:43 +0200] "GET /upload/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:46:33 +0200] "GET /admin/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:47:20 +0200] "GET /assets/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:48:13 +0200] "GET /upload/image/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:48:55 +0200] "GET /Public/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:49:22 +0200] "GET /vendor/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:49:38 +0200] "GET /local/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:49:55 +0200] "GET /modules/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:05:17 +0200] "GET /shells.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:05:25 +0200] "GET /leafmailer2.8.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:05:46 +0200] "GET /alfav4.1-tesla.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:05:51 +0200] "GET /madmailer.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:05:55 +0200] "GET /wp_backup.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:06:01 +0200] "GET /evil.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:06:30 +0200] "GET /lux.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:06:43 +0200] "GET /0byte.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:34:03 +0200] "GET /wp-content/uploads/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:43:36 +0200] "GET /ALFA_DATA/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:46:58 +0200] "GET /images/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:47:45 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:48:37 +0200] "GET /assets/images/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:50:18 +0200] "GET /Site/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:51:25 +0200] "GET /shop/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:51:43 +0200] "GET /files/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:52:07 +0200] "GET /include/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:08:46 +0200] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:36:48 +0200] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:37:06 +0200] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:37:22 +0200] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:37:59 +0200] "GET /wp-content/mu-plugins/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:41:20 +0200] "GET /ALFA_DATA/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:42:57 +0200] "GET /.well-known/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:43:13 +0200] "GET /cgi-bin/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:45:04 +0200] "GET /.well-known/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:46:00 +0200] "GET /admin/uploads/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:46:18 +0200] "GET /Admin/uploads/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:50:41 +0200] "GET /system/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:52:25 +0200] "GET /Assets/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:52:46 +0200] "GET /images/stories/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:53:10 +0200] "GET /plugins/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:53:20 +0200] "GET /php/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:51:04 +0200] "GET /template/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:51:57 +0200] "GET /admin/editor/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:08:27 +0200] "GET /admin/images/slider/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:09:01 +0200] "GET /sites/default/files/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:09:38 +0200] "GET /components/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:12:32 +0200] "GET /wp-admin/network/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:46:37 +0200] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:47:56 +0200] "GET /wp-content/mu-plugins/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:49:59 +0200] "GET /.well-known/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:54:33 +0200] "GET /.well-known/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:54:50 +0200] "GET /uploads/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:55:25 +0200] "GET /admin/uploads/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:56:32 +0200] "GET /assets/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:56:59 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:58:48 +0200] "GET /local/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:09:24 +0200] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:09:52 +0200] "GET /admin/uploads/images/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:12:44 +0200] "GET /wp-admin/user/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:14:00 +0200] "GET /wp-admin/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:43:38 +0200] "GET /wp-content/uploads/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:50:20 +0200] "GET /ALFA_DATA/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:51:08 +0200] "GET /.well-known/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:54:13 +0200] "GET /.well-known/acme-challenge/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:55:57 +0200] "GET /admin/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:56:19 +0200] "GET /images/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:57:20 +0200] "GET /upload/image/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:58:01 +0200] "GET /Public/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:58:21 +0200] "GET /vendor/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:58:58 +0200] "GET /modules/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:59:15 +0200] "GET /system/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:09:12 +0200] "GET /admin/controller/extension/extension/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:13:21 +0200] "GET /wp-content/plugins/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:47:10 +0200] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:47:35 +0200] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:50:55 +0200] "GET /.well-known/acme-challenge/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:51:26 +0200] "GET /cgi-bin/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:53:32 +0200] "GET /ALFA_DATA/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:55:07 +0200] "GET /upload/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:55:36 +0200] "GET /Admin/uploads/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:57:44 +0200] "GET /assets/images/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:59:25 +0200] "GET /template/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:59:36 +0200] "GET /shop/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:18:00:00 +0200] "GET /admin/editor/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:18:00:21 +0200] "GET /include/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:18:00:42 +0200] "GET /images/stories/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:59:46 +0200] "GET /files/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:59:02 +0200] "GET /Site/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:18:00:30 +0200] "GET /Assets/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:18:00:55 +0200] "GET /plugins/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:18:01:09 +0200] "GET /php/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"