|
Server IP : 109.234.166.131 / Your IP : 216.73.216.44 Web Server : LiteSpeed System : Linux garfish.o2switch.net 4.18.0-553.62.1.lve.el8.x86_64 #1 SMP Mon Jul 21 17:50:35 UTC 2025 x86_64 User : bean7936 ( 1010) PHP Version : 8.3.31 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON Directory (0750) : /home/bean7936/perfect-community.com/../access-logs/ |
| [ Home ] | [ C0mmand ] | [ Upload File ] |
|---|
103.199.85.118 - - [29/Apr/2026:11:48:28 +0200] "GET /ztukvivl.php HTTP/1.1" 200 140 "http://nature-viande.bean7936.odns.fr/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 103.199.85.118 - - [29/Apr/2026:12:08:11 +0200] "GET /readme_eabb.php?bd=bdkr25372hjfsskskl HTTP/1.1" 200 9896 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 103.199.85.118 - - [29/Apr/2026:11:48:28 +0200] "POST /ztukvivl.php HTTP/1.1" 200 393 "http://nature-viande.bean7936.odns.fr/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 103.199.85.118 - - [29/Apr/2026:12:08:11 +0200] "POST /ztukvivl.php HTTP/1.1" 200 396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 103.199.85.118 - - [29/Apr/2026:11:48:29 +0200] "GET /Readme_c592.txt HTTP/1.1" 200 84 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 103.199.85.118 - - [29/Apr/2026:12:08:10 +0200] "GET /ztukvivl.php HTTP/1.1" 200 140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 91.134.142.216 - - [29/Apr/2026:12:43:33 +0200] "GET /Readme_c592.txt HTTP/1.1" 200 84 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 81.53.36.105 - - [29/Apr/2026:12:43:33 +0200] "GET /Readme_c592.txt HTTP/1.1" 200 84 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" 91.134.142.216 - - [29/Apr/2026:12:49:40 +0200] "GET /Readme_c592.txt HTTP/1.1" 200 84 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 91.134.142.216 - - [29/Apr/2026:12:50:38 +0200] "GET /favicon.ico HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 185.62.188.4 - - [29/Apr/2026:13:39:50 +0200] "GET /readme.txt HTTP/1.1" 200 46 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) QtWebEngine/5.13.1 Chrome/73.0.3683.105 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:12:07 +0200] "GET /504.php HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:14:00 +0200] "GET /admin.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:15:03 +0200] "GET /log-mama/function.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:15:13 +0200] "GET /bk/index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:15:22 +0200] "GET /first.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:15:31 +0200] "GET /admin.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:16:23 +0200] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:18:07 +0200] "GET /admin.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:18:59 +0200] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:19:40 +0200] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:21:06 +0200] "GET /woh.php HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:29:33 +0200] "GET /wp-content/plugins/geu/geu.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 51.195.201.11 - - [29/Apr/2026:12:33:13 +0200] "GET /Readme_c592.txt HTTP/1.1" 200 84 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/131.0.2903.86" 91.134.142.216 - - [29/Apr/2026:12:43:58 +0200] "GET /favicon.ico HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 103.160.68.141 - - [29/Apr/2026:13:35:21 +0200] "GET /readme.txt HTTP/1.1" 200 46 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 103.160.68.141 - - [29/Apr/2026:13:35:22 +0200] "GET /favicon.ico HTTP/1.1" 404 1251 "http://nature-viande.bean7936.odns.fr/readme.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:11:15 +0200] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:12:16 +0200] "GET /444.php HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:15:24 +0200] "GET /themes.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:15:45 +0200] "GET /444.php HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:17:56 +0200] "GET /themes.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:18:08 +0200] "GET /log-mama/function.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:19:19 +0200] "GET /Mshell.php HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:21:27 +0200] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:28:08 +0200] "GET /file17.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:29:00 +0200] "GET /wp-content/plugins/hanau/akc.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:29:26 +0200] "GET /aw.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:34:14 +0200] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 1251 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 91.134.142.216 - - [29/Apr/2026:12:49:41 +0200] "GET /favicon.ico HTTP/1.1" 404 1251 "https://nature-viande.bean7936.odns.fr/Readme_c592.txt" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 41.248.229.245 - - [29/Apr/2026:14:13:40 +0200] "GET /first.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:14:21 +0200] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:15:33 +0200] "GET /504.php HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:15:33 +0200] "GET /admin.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:15:59 +0200] "GET /woh.php HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:19:14 +0200] "GET /bk/index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:26:18 +0200] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:27:50 +0200] "GET /ioxi-o.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:27:55 +0200] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:28:30 +0200] "GET /file.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:30:17 +0200] "GET /wp-content/plugins/view-ad/ms.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:33:34 +0200] "GET /wp-content/plugins/work-list/lang.php HTTP/1.1" 404 1251 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:30:08 +0200] "GET /wp-content/plugins/deu/ms.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:30:54 +0200] "GET /Mshell.php HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:34:52 +0200] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 404 1251 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:37:42 +0200] "GET /ioxi-o.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:39:15 +0200] "GET /wp-content/plugins/hanau/akc.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:39:49 +0200] "GET /wp-content/plugins/geu/geu.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:40:30 +0200] "GET /wp-content/plugins/deu/ms.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:38:32 +0200] "GET /file17.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:38:51 +0200] "GET /file.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:39:23 +0200] "GET /aw.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:41:08 +0200] "GET /wp-content/plugins/view-ad/ms.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:50:53 +0200] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 404 1251 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:52:25 +0200] "GET /xleet.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:56:09 +0200] "GET /asd.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:56:18 +0200] "GET /ws.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:56:48 +0200] "GET /wp-includes/images/wp-login.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:57:32 +0200] "GET /lv.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:57:39 +0200] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:57:57 +0200] "GET /dropdown.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:57:58 +0200] "GET /sad/about.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:58:22 +0200] "GET /install.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:58:27 +0200] "GET /wp-content/x/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:59:14 +0200] "GET /cong.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:59:22 +0200] "GET /wp-content/plugins/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:59:29 +0200] "GET /about/function.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:59:45 +0200] "GET /wp-admin/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:49:51 +0200] "GET /wp-content/plugins/work-list/lang.php HTTP/1.1" 404 1251 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:50:27 +0200] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 1251 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:53:16 +0200] "GET /x.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:56:17 +0200] "GET /1.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:56:30 +0200] "GET /cgi-bin/wp-login.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:57:13 +0200] "GET /hehehehe.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:57:35 +0200] "GET /content.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:57:42 +0200] "GET /goat.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:57:48 +0200] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:58:09 +0200] "GET /wp-admin/admin.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:58:40 +0200] "GET /wp-login.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:59:12 +0200] "GET /.well-known/content.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:00:01 +0200] "GET /about.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:00:24 +0200] "GET /cgi-bin/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:00:31 +0200] "GET /wp-content/plugins/admin.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:00:42 +0200] "GET /1.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:52:37 +0200] "GET /xl2023.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:52:53 +0200] "GET /xl2023x.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:53:09 +0200] "GET /xxl.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:53:42 +0200] "GET /xl.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:55:58 +0200] "GET /wp-content/banners/about.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:57:08 +0200] "GET /login.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:57:14 +0200] "GET /simple.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:58:01 +0200] "GET /radio.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:58:17 +0200] "GET /classwithtostring.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:59:05 +0200] "GET /lock.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:14:59:10 +0200] "GET /index/function.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:00:14 +0200] "GET /themes.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:00:39 +0200] "GET /admin.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:00:47 +0200] "GET /cgi-bin/wp-login.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:00:53 +0200] "GET /wp-includes/images/wp-login.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:01:00 +0200] "GET /login.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:01:00 +0200] "GET /hehehehe.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:01:13 +0200] "GET /lv.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:01:15 +0200] "GET /content.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:01:18 +0200] "GET /goat.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:01:25 +0200] "GET /radio.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:01:29 +0200] "GET /classwithtostring.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:01:29 +0200] "GET /.well-known/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:01:30 +0200] "GET /install.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:01:32 +0200] "GET /wp-content/x/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:02:00 +0200] "GET /.well-known/content.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:02:01 +0200] "GET /cong.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:02:03 +0200] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:02:08 +0200] "GET /wp-content/plugins/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:02:14 +0200] "GET /about/function.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:02:23 +0200] "GET /wp-admin/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:02:30 +0200] "GET /themes.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:00:43 +0200] "GET /ws.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:01:07 +0200] "GET /wp-content/plugins/ioxi/alfa-ioxi.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:01:19 +0200] "GET /goat1.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:01:24 +0200] "GET /sad/about.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:01:26 +0200] "GET /wp-admin/admin.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:01:38 +0200] "GET /wp-login.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:01:57 +0200] "GET /index/function.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:02:00 +0200] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:02:35 +0200] "GET /cgi-bin/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:02:39 +0200] "GET /wp-content/plugins/admin.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:02:41 +0200] "GET /admin.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:03:03 +0200] "GET /wp-content/plugins/ioxi/alfa-ioxi.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:03:06 +0200] "GET /wp-admin/user/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:03:12 +0200] "GET /goat1.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:03:21 +0200] "GET /.well-known/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:03:38 +0200] "GET /xleet.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:00:17 +0200] "GET /wp-mail.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:00:31 +0200] "GET /wp-content/banners/about.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:00:40 +0200] "GET /asd.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:01:02 +0200] "GET /simple.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:01:11 +0200] "GET /wp-admin/user/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:01:15 +0200] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:01:19 +0200] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:01:22 +0200] "GET /dropdown.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:01:31 +0200] "GET /wp-admin/network/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:01:54 +0200] "GET /images/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:01:54 +0200] "GET /lock.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:02:27 +0200] "GET /about.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:02:34 +0200] "GET /wp-mail.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:03:40 +0200] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:04:24 +0200] "GET /xxl.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:04:36 +0200] "GET /x.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:04:48 +0200] "GET /xl.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:06:49 +0200] "GET /images/iR7SzrsOUEP.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:08:49 +0200] "GET /xleet-shell.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:09:32 +0200] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:10:24 +0200] "GET /iR7SzrsOUEP.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:20:06 +0200] "GET /themes/seotheme/mar.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:21:27 +0200] "GET /wso2.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:22:48 +0200] "GET /if.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:23:21 +0200] "GET /skippershell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:23:30 +0200] "GET /tttt.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:24:20 +0200] "GET /saudi.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:24:37 +0200] "GET /alfashell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:24:47 +0200] "GET /my_alfa.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:25:43 +0200] "GET /priv8.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:26:06 +0200] "GET /cmd13.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:26:27 +0200] "GET /1index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:26:43 +0200] "GET /404.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:27:00 +0200] "GET /swm.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:27:37 +0200] "GET /shx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:27:50 +0200] "GET /ws.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:28:00 +0200] "GET /m.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:28:28 +0200] "GET /leafmailer.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:03:39 +0200] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:03:55 +0200] "GET /xl2023.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:04:18 +0200] "GET /xl2023x.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:05:42 +0200] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:09:10 +0200] "GET /admin-heade.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:19:37 +0200] "GET /smtp.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:19:49 +0200] "GET /raw.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:21:17 +0200] "GET /1index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:21:33 +0200] "GET /2022.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:21:48 +0200] "GET /alfashell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:21:52 +0200] "GET /shellalfa.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:22:04 +0200] "GET /x.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:22:22 +0200] "GET /files.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:22:26 +0200] "GET /shell4.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:22:34 +0200] "GET /ups.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:24:13 +0200] "GET /inje3ctor.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:24:30 +0200] "GET /wso.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:25:00 +0200] "GET /uploader.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:25:32 +0200] "GET /c99.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:25:51 +0200] "GET /Navir.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:28:07 +0200] "GET /edit-form.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:28:18 +0200] "GET /LEAF.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:15:03:24 +0200] "GET /wp-admin/network/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:03:35 +0200] "GET /images/index.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:15:08:29 +0200] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 404 1251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:16:19:41 +0200] "GET /themes.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:19:46 +0200] "GET /admin.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:19:51 +0200] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:20:08 +0200] "GET /wp-content/plugins/ango/cong.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:20:09 +0200] "GET /wp-content/plugins/ango/sett.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:21:22 +0200] "GET /wso.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:21:24 +0200] "GET /ws.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:21:38 +0200] "GET /2021.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:21:58 +0200] "GET /xxx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:22:13 +0200] "GET /file.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:22:43 +0200] "GET /ru.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:23:00 +0200] "GET /vuln.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:23:12 +0200] "GET /skipper.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:23:45 +0200] "GET /tshop.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:23:54 +0200] "GET /alfa.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:25:08 +0200] "GET /up.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:25:19 +0200] "GET /hacked.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:26:16 +0200] "GET /inc20k1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:27:25 +0200] "GET /doc.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:28:48 +0200] "GET /leafmailer2.8.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:29:21 +0200] "GET /x.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:29:27 +0200] "GET /srx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:29:38 +0200] "GET /1337.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:29:57 +0200] "GET /XxX.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:30:19 +0200] "GET /alex.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:30:38 +0200] "GET /marijuana.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:31:37 +0200] "GET /wso1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:32:22 +0200] "GET /shell4.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:32:48 +0200] "GET /ru.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:32:57 +0200] "GET /if.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:33:12 +0200] "GET /vuln.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:34:53 +0200] "GET /wso.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:35:18 +0200] "GET /my_alfa.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:35:28 +0200] "GET /uploader.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:36:23 +0200] "GET /Navir.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:36:58 +0200] "GET /1index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:37:13 +0200] "GET /404.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:38:01 +0200] "GET /gif.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:38:11 +0200] "GET /simple.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:38:26 +0200] "GET /root.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:39:06 +0200] "GET /doc.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:39:12 +0200] "GET /shx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:40:13 +0200] "GET /LEAF.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:41:03 +0200] "GET /php_sender.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:28:58 +0200] "GET /Leaf.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:29:44 +0200] "GET /xx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:30:28 +0200] "GET /new.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:30:53 +0200] "GET /gaza.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:31:27 +0200] "GET /wikindex.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:32:34 +0200] "GET /ups.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:34:00 +0200] "GET /tshop.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:34:12 +0200] "GET /alfa.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:34:33 +0200] "GET /inje3ctor.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:34:43 +0200] "GET /saudi.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:35:02 +0200] "GET /alfashell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:35:54 +0200] "GET /c99.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:36:39 +0200] "GET /cmd13.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:36:49 +0200] "GET /inc20k1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:37:22 +0200] "GET /swm.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:37:53 +0200] "GET /php.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:38:47 +0200] "GET /bot.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:40:28 +0200] "GET /leafmailer.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:40:41 +0200] "GET /mailer.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:40:53 +0200] "GET /leafmailer2.8.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:41:41 +0200] "GET /leaf_php.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:42:07 +0200] "GET /leaf_mailer.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:42:47 +0200] "GET /x.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:43:03 +0200] "GET /1337.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:28:38 +0200] "GET /mailer.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:29:10 +0200] "GET /leaf.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:30:10 +0200] "GET /lf.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:31:16 +0200] "GET /3index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:31:49 +0200] "GET /bb.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:32:02 +0200] "GET /Lux.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:32:14 +0200] "GET /haxor.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:33:32 +0200] "GET /skipper.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:33:40 +0200] "GET /skippershell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:33:50 +0200] "GET /tttt.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:35:38 +0200] "GET /up.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:35:47 +0200] "GET /hacked.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:36:05 +0200] "GET /priv8.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:37:42 +0200] "GET /mini.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:38:36 +0200] "GET /toor.pho HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:39:23 +0200] "GET /ws.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:39:37 +0200] "GET /m.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:39:54 +0200] "GET /edit-form.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:41:21 +0200] "GET /phpsender.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:41:56 +0200] "GET /php.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:42:15 +0200] "GET /Leaf.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:42:55 +0200] "GET /srx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:43:33 +0200] "GET /XxX.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:44:04 +0200] "GET /new.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:45:13 +0200] "GET /wso1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:43:44 +0200] "GET /lf.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:43:55 +0200] "GET /alex.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:46:14 +0200] "GET /wp-content/plugins/cakil/up.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:46:41 +0200] "GET /wp-content/plugins/cache-wordpress/payment.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:47:21 +0200] "GET /wpvitamins.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:47:39 +0200] "GET /blog/fw.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:47:53 +0200] "GET /wordpress/fw.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:50:53 +0200] "GET /ovshell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:52:17 +0200] "GET /xindex.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:52:24 +0200] "GET /wiki-index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:52:42 +0200] "GET /srx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:53:12 +0200] "GET /c99.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:53:25 +0200] "GET /lab.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:53:28 +0200] "GET /plugins.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:53:33 +0200] "GET /1.aspx HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:53:39 +0200] "GET /shell.aspx HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:53:49 +0200] "GET /a.aspx HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:54:22 +0200] "GET /alfashell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:54:30 +0200] "GET /av.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:54:35 +0200] "GET /goods.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:54:42 +0200] "GET /upl.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:55:01 +0200] "GET /fox.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:55:47 +0200] "GET /yo.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:56:45 +0200] "GET /images/wp-init.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:41:25 +0200] "GET /smtp.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:42:27 +0200] "GET /leaf.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:43:17 +0200] "GET /xx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:44:09 +0200] "GET /marijuana.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:44:20 +0200] "GET /gaza.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:44:52 +0200] "GET /3index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:45:02 +0200] "GET /wikindex.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:45:17 +0200] "GET /bb.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:45:49 +0200] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:46:04 +0200] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:46:30 +0200] "GET /wp-content/plugins/ubh/con.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:47:04 +0200] "GET /black.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:50:38 +0200] "GET /shx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:50:43 +0200] "GET /kil.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:51:00 +0200] "GET /alfanibos.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:51:06 +0200] "GET /ms.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:51:52 +0200] "GET /shx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:52:32 +0200] "GET /Bulle.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:52:55 +0200] "GET /wp-content/plugins/owfsmac/mar.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:53:19 +0200] "GET /tersembunyi.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:54:54 +0200] "GET /login.phtml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:55:06 +0200] "GET /gelay.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:55:22 +0200] "GET /gel4y.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:56:19 +0200] "GET /images/shell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:45:28 +0200] "GET /Lux.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:45:37 +0200] "GET /haxor.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:45:56 +0200] "GET /wp-content/plugins/zaen/includes/loadme.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:46:49 +0200] "GET /wp-content/plugins/cekidot/mr.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:47:14 +0200] "GET /wp-content/plugins/wp-freeform/black2llleaf.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:48:32 +0200] "GET /f0x.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:48:54 +0200] "GET /wp-content/f0x.ph HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:49:16 +0200] "GET /alfa.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:50:14 +0200] "GET /module.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:50:21 +0200] "GET /Init.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:51:15 +0200] "GET /message.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:51:32 +0200] "GET /wikiindex.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:51:44 +0200] "GET /alex.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:53:03 +0200] "GET /wso.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:54:15 +0200] "GET /lyda.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:55:14 +0200] "GET /darkshell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:55:31 +0200] "GET /contacts.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:56:12 +0200] "GET //images/sym.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:56:26 +0200] "GET /images/mini.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:56:33 +0200] "GET /images/mar.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:56:38 +0200] "GET /images/1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:56:53 +0200] "GET /images/upload.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:57:26 +0200] "GET /images/alfa.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:57:49 +0200] "GET /images/gelay.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:57:01 +0200] "GET /images/up.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:57:10 +0200] "GET /images/fox.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:58:33 +0200] "GET /images/leaf.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:58:52 +0200] "GET /images/sym403.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:59:18 +0200] "GET /images/lux.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:59:50 +0200] "GET /alfi.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:59:58 +0200] "GET /DC.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:00:51 +0200] "GET /Ninja.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:01:59 +0200] "GET /codeboy1877x.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:02:15 +0200] "GET /Alfa.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:07:58 +0200] "GET /Alfawso.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:08:06 +0200] "GET /Alfashell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:08:12 +0200] "GET /alf4.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:08:20 +0200] "GET /old-index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:11:52 +0200] "GET /ym.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:12:08 +0200] "GET /yyyy.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:12:14 +0200] "GET /alfa1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:12:44 +0200] "GET /3.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:13:02 +0200] "GET /5.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:13:27 +0200] "GET /7.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:13:48 +0200] "GET /10.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:14:08 +0200] "GET /hexor.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:14:16 +0200] "GET /1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:14:38 +0200] "GET /leaf.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:58:10 +0200] "GET /images/bypass.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:58:18 +0200] "GET /images/c99.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:58:41 +0200] "GET /images/wso.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:59:02 +0200] "GET /images/leafmailer2.8.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:59:11 +0200] "GET /images/priv8.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:59:27 +0200] "GET /images/wp.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:01:16 +0200] "GET /snd21.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:01:48 +0200] "GET /ice.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:08:21 +0200] "GET /pop.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:08:29 +0200] "GET /leafmailer.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:09:04 +0200] "GET /yhr.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:11:58 +0200] "GET /1945.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:12:37 +0200] "GET /2.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:13:16 +0200] "GET /tesla1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:13:40 +0200] "GET /9.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:13:54 +0200] "GET /shadowx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:14:47 +0200] "GET /upl.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:14:58 +0200] "GET /FoxWSOv1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:15:05 +0200] "GET /foxwsov1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:15:36 +0200] "GET /upload.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:15:43 +0200] "GET /1index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:16:03 +0200] "GET /4index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:16:13 +0200] "GET /6index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:16:20 +0200] "GET /7index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:57:18 +0200] "GET /images/fw.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:57:36 +0200] "GET /images/alfashell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:57:59 +0200] "GET /images/byps.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:58:26 +0200] "GET /images/x.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:59:36 +0200] "GET /xxx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:16:59:44 +0200] "GET /w3llstore.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:00:43 +0200] "GET /mailer.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:01:10 +0200] "GET /fpebr.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:01:27 +0200] "GET /olu.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:01:35 +0200] "GET /tuco.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:01:42 +0200] "GET /radio.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:02:07 +0200] "GET /wsanon.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:09:00 +0200] "GET /fox1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:12:26 +0200] "GET /159.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:12:56 +0200] "GET /4.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:13:10 +0200] "GET /6.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:13:33 +0200] "GET /8.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:14:04 +0200] "GET /xz.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:14:24 +0200] "GET /01.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:14:31 +0200] "GET /haxor.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:14:42 +0200] "GET /404.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:15:13 +0200] "GET /FoxWSOv2.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:16:45 +0200] "GET /index2.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:17:01 +0200] "GET /index4.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:15:21 +0200] "GET /foxwsov2.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:15:29 +0200] "GET /shellx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:15:52 +0200] "GET /2index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:15:59 +0200] "GET /3index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:16:06 +0200] "GET /5index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:16:31 +0200] "GET /9index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:17:16 +0200] "GET /index6.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:17:20 +0200] "GET /index7.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:17:32 +0200] "GET /index9.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:17:38 +0200] "GET /indexx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:17:48 +0200] "GET /indeex.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:17:56 +0200] "GET /jindex.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:18:11 +0200] "GET /up.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:21:09 +0200] "GET /tgh.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:21:27 +0200] "GET /.well-known/shell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:22:00 +0200] "GET /.well-known/leaf.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:22:16 +0200] "GET /.well-known/leafmailer2.8.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:22:21 +0200] "GET /.well-known/x.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:22:35 +0200] "GET /.well-known/about.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:22:43 +0200] "GET /.well-known/maro.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:22:57 +0200] "GET /am.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:23:25 +0200] "GET /images/shell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:24:25 +0200] "GET /images/1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:24:50 +0200] "GET /images/mar.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:16:24 +0200] "GET /8index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:16:39 +0200] "GET /index1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:16:52 +0200] "GET /index3.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:17:09 +0200] "GET /index5.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:18:57 +0200] "GET /images/upl.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:20:02 +0200] "GET /images/about.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:20:15 +0200] "GET /wp-admin/about.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:21:43 +0200] "GET /.well-known/a.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:21:52 +0200] "GET /.well-known/404.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:22:07 +0200] "GET /.well-known/leafmailer.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:23:38 +0200] "GET /images/a.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:23:45 +0200] "GET /images/404.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:24:08 +0200] "GET /images/leafmailer2.8.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:24:17 +0200] "GET /images/x.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:24:35 +0200] "GET /images/sym403.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:24:42 +0200] "GET /images/sym.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:25:00 +0200] "GET /wpx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:26:48 +0200] "GET /sym403.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:28:00 +0200] "GET /symlink.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:28:44 +0200] "GET /shells.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:28:50 +0200] "GET /mini.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:29:46 +0200] "GET /madmailer.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:30:11 +0200] "GET /twins.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:30:49 +0200] "GET /wordpress/32.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:17:27 +0200] "GET /index8.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:18:45 +0200] "GET /.well-known/upl.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:19:51 +0200] "GET /.well-known/about.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:21:17 +0200] "GET /.well-known/mari.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:21:22 +0200] "GET /.well-known/gelay.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:21:33 +0200] "GET /.well-known/fw.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:22:29 +0200] "GET /.well-known/am.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:22:50 +0200] "GET /about.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:23:09 +0200] "GET /images/mari.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:23:15 +0200] "GET /images/gelay.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:23:31 +0200] "GET /images/fw.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:23:57 +0200] "GET /images/leaf.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:24:01 +0200] "GET /images/leafmailer.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:25:42 +0200] "GET /load.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:28:07 +0200] "GET /priv8.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:28:33 +0200] "GET /sh3ll.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:28:57 +0200] "GET /leafmailer2.8.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:29:51 +0200] "GET /wp_backup.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:29:57 +0200] "GET /raw.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:30:18 +0200] "GET /45.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:35:41 +0200] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:35:56 +0200] "GET /wp-content/mu-plugins/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:37:36 +0200] "GET /529.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:25:54 +0200] "GET /images/am.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:28:13 +0200] "GET /bypass403.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:28:25 +0200] "GET /foxwso.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:28:30 +0200] "GET /alfa.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:29:28 +0200] "GET /alfav4.1-tesla.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:29:37 +0200] "GET /xleetmailer.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:30:04 +0200] "GET /evil.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:30:29 +0200] "GET /alf42.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:30:58 +0200] "GET /lux.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:31:05 +0200] "GET /doc.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:31:12 +0200] "GET /mas.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:32:39 +0200] "GET /wp-content/uploads/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:35:25 +0200] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:37:28 +0200] "GET /matamu.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:37:53 +0200] "GET /AK-74.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:38:26 +0200] "GET /MyShell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:38:35 +0200] "GET /PHP_Shell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:38:38 +0200] "GET /.well-known/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:41:53 +0200] "GET /teslaxx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:42:24 +0200] "GET /mari.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:42:25 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:37:39 +0200] "GET /.well-known/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:37:54 +0200] "GET /ALFA_DATA/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:38:03 +0200] "GET /shv3n0m.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:39:16 +0200] "GET /ALFA_DATA/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:39:30 +0200] "GET /888.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:40:02 +0200] "GET /.well-known/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:40:36 +0200] "GET /upload/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:40:57 +0200] "GET /admin/uploads/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:41:07 +0200] "GET /Admin/uploads/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:41:22 +0200] "GET /admin/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:41:40 +0200] "GET /images/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:42:06 +0200] "GET /assets/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:42:06 +0200] "GET /gray.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:42:12 +0200] "GET /87.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:42:30 +0200] "GET /upx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:42:35 +0200] "GET /upload/image/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:43:50 +0200] "GET /modules/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:31:25 +0200] "GET /0byte.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:31:30 +0200] "GET /73.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:35:05 +0200] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:37:45 +0200] "GET /aci.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:38:22 +0200] "GET /.well-known/acme-challenge/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:38:44 +0200] "GET /l28.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:39:01 +0200] "GET /cgi-bin/ HTTP/1.1" 403 1242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:39:22 +0200] "GET /Uploader.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:39:48 +0200] "GET /.well-known/acme-challenge/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:40:18 +0200] "GET /uploads/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:41:35 +0200] "GET /alfa3.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:41:43 +0200] "GET /ubh.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:41:56 +0200] "GET /wp-content/uploads/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:42:57 +0200] "GET /assets/images/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:43:35 +0200] "GET /local/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:44:09 +0200] "GET /Site/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:45:08 +0200] "GET /shop/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:45:30 +0200] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:43:16 +0200] "GET /Public/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:43:23 +0200] "GET /vendor/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:43:36 +0200] "GET /c0derz_shell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:43:45 +0200] "GET /cmd.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:43:53 +0200] "GET /cybershell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:44:03 +0200] "GET /fatal.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:44:18 +0200] "GET /robots.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:44:24 +0200] "GET /php-backdoor.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:44:32 +0200] "GET /IndoXploit.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:44:40 +0200] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:44:43 +0200] "GET /template/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:44:46 +0200] "GET /Simple_PHP_backdoor.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:45:00 +0200] "GET /simple-upload.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:45:10 +0200] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:45:28 +0200] "GET /z.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:45:45 +0200] "GET /admin/editor/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:46:46 +0200] "GET /images/stories/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:47:09 +0200] "GET /plugins/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:48:43 +0200] "GET /.well-known/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:44:31 +0200] "GET /system/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:45:11 +0200] "GET /simple_backdoor.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:45:20 +0200] "GET /r57shell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:45:22 +0200] "GET /files/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:45:58 +0200] "GET /wp-content/mu-plugins/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:46:27 +0200] "GET /Assets/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:46:33 +0200] "GET /78.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:47:32 +0200] "GET /sys.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:49:17 +0200] "GET /mar.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:49:24 +0200] "GET /cpanel.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:49:37 +0200] "GET /langar.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:49:45 +0200] "GET /401.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:49:56 +0200] "GET /ups.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:50:26 +0200] "GET /skipper.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:50:53 +0200] "GET /x.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:53:25 +0200] "GET /sincap.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:53:43 +0200] "GET /upload/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:54:08 +0200] "GET /admin/uploads/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:54:19 +0200] "GET /w3d.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:54:39 +0200] "GET /wacking.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:54:44 +0200] "GET /images/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:49:31 +0200] "GET /kanghoax.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:49:35 +0200] "GET /.well-known/acme-challenge/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:49:49 +0200] "GET /.well-known/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:50:13 +0200] "GET /b.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:50:20 +0200] "GET /ALFA_DATA/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:50:43 +0200] "GET /skippershell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:51:02 +0200] "GET /webadmin.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:51:04 +0200] "GET /.well-known/acme-challenge/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:51:20 +0200] "GET /simattacker.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:51:26 +0200] "GET /sh.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:53:19 +0200] "GET /uploads/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:54:03 +0200] "GET /wso2.8.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:54:23 +0200] "GET /admin/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:54:47 +0200] "GET /wordpress.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:54:56 +0200] "GET /xinfo.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:55:00 +0200] "GET /assets/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:55:15 +0200] "GET /russian.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:55:51 +0200] "GET /assets/images/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:55:51 +0200] "GET /c999shell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:56:00 +0200] "GET /p0wny-shell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:46:09 +0200] "GET /include/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:47:31 +0200] "GET /php/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:49:02 +0200] "GET /ALFA_DATA/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:49:59 +0200] "GET /cgi-bin/ HTTP/1.1" 403 1242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:50:07 +0200] "GET /ye.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:51:12 +0200] "GET /webshell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:51:31 +0200] "GET /.well-known/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:53:14 +0200] "GET /shankar.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:53:38 +0200] "GET /wso-latest.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:53:50 +0200] "GET /wso2.7.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:54:09 +0200] "GET /w.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:54:20 +0200] "GET /Admin/uploads/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:54:28 +0200] "GET /w4k.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:55:12 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:55:40 +0200] "GET /simple-shell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:55:41 +0200] "GET /bitwise.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:56:09 +0200] "GET /Public/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:56:37 +0200] "GET /robot.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:57:03 +0200] "GET /sure.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:57:11 +0200] "GET /sys32.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:56:11 +0200] "GET /ex0shell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:56:13 +0200] "GET /exp.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:56:23 +0200] "GET /pHpINJ.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:56:53 +0200] "GET /simple_cmd.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:57:04 +0200] "GET /local/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:58:18 +0200] "GET /wp-content/plugins/aryabot/upx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:58:42 +0200] "GET /wp-content/plugins/aryabot/byps.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:59:00 +0200] "GET /shop/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:59:01 +0200] "GET /ah.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:59:11 +0200] "GET /m4r1ju4n4.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:59:22 +0200] "GET /a.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:59:26 +0200] "GET /admin/editor/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:59:34 +0200] "GET /maro.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:59:48 +0200] "GET /Assets/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:59:50 +0200] "GET /images/daes.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:00:15 +0200] "GET /dxshell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:00:16 +0200] "GET /plugins/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:18:00:43 +0200] "GET /xmrlpc.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:00:53 +0200] "GET /404webshell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:01:42 +0200] "GET /ak47shell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:02:42 +0200] "GET /yuuki.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:55:05 +0200] "GET /zacosmall.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:55:24 +0200] "GET /simple_php_backdoor_by_dk.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:55:39 +0200] "GET /upload/image/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:56:43 +0200] "GET /vendor/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:57:25 +0200] "GET /Uploading.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:57:34 +0200] "GET /modules/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:57:50 +0200] "GET /xx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:58:00 +0200] "GET /wp-content/plugins/aryabot/mari.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:58:13 +0200] "GET /system/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:58:48 +0200] "GET /fx.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:59:38 +0200] "GET /include/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:59:39 +0200] "GET /images/maro.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:59:58 +0200] "GET /images/4pride.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:00:03 +0200] "GET /kii.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:00:27 +0200] "GET /mailer3.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:00:37 +0200] "GET /main.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:01:02 +0200] "GET /mailer1.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:02:19 +0200] "GET /xleet.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:02:25 +0200] "GET /owl.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:02:54 +0200] "GET /spawn.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:03:15 +0200] "GET /well.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:57:42 +0200] "GET /byps.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:57:56 +0200] "GET /Site/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:58:27 +0200] "GET /wp-content/plugins/aryabot/wawe.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:58:46 +0200] "GET /template/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:58:53 +0200] "GET /who.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:59:05 +0200] "GET /marijuana.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:17:59:13 +0200] "GET /files/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:17:59:28 +0200] "GET /kuda.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:00:01 +0200] "GET /images/stories/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:18:00:28 +0200] "GET /php/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:18:00:49 +0200] "GET /529.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:01:08 +0200] "GET /nshell%20(1).php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:01:15 +0200] "GET /nshell.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:01:21 +0200] "GET /predator.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:01:27 +0200] "GET /zaco.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:01:35 +0200] "GET /small.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:01:48 +0200] "GET /b374k.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:01:57 +0200] "GET /r57.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:02:05 +0200] "GET /cgi.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:02:11 +0200] "GET /olux.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:03:08 +0200] "GET /well.php?p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:03:30 +0200] "GET / HTTP/1.1" 200 153689 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:04:08 +0200] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:18:04:29 +0200] "GET /sites/default/files/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:18:04:50 +0200] "GET /admin/controller/extension/extension/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:18:04:59 +0200] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:18:08:11 +0200] "GET /wp-admin/user/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:18:09:46 +0200] "GET /wp-admin/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:18:11:05 +0200] "GET /sites/default/files/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:18:02:49 +0200] "GET /stfu.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:02:59 +0200] "GET /puki.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:03:02 +0200] "GET /killbot.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:03:34 +0200] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:03:59 +0200] "GET /admin/images/slider/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:18:08:52 +0200] "GET /wp-content/plugins/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:18:10:43 +0200] "GET /admin/images/slider/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:18:10:52 +0200] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:18:03:20 +0200] "GET /%20Chitoge.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:03:25 +0200] "GET /cp.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.248.229.245 - - [29/Apr/2026:18:05:16 +0200] "GET /components/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:18:05:35 +0200] "GET /admin/uploads/images/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:18:07:59 +0200] "GET /wp-admin/network/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.248.229.245 - - [29/Apr/2026:18:11:11 +0200] "GET /admin/controller/extension/extension/ HTTP/1.1" 404 1251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"