| Server IP : 172.67.216.113 / Your IP : 172.71.28.146 [ Web Server : Apache System : Linux cpanel01wh.bkk1.cloud.z.com 2.6.32-954.3.5.lve1.4.59.el6.x86_64 #1 SMP Thu Dec 6 05:11:00 EST 2018 x86_64 User : cp648411 ( 1354) PHP Version : 7.2.34 Disable Function : NONE Domains : 0 Domains MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : OFF | Pkexec : OFF Directory : /home/cp648411/access-logs/ |
Upload File : |
159.65.22.225 - - [23/May/2026:21:02:04 +0700] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 159.65.22.225 - - [23/May/2026:21:02:05 +0700] "GET /favicon.ico HTTP/1.1" 404 - "http://onnud.71570841-62-20210816102605.webstarterz.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 104.23.209.24 - - [23/May/2026:21:14:19 +0700] "GET /images/images/cache.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 104.23.209.24 - - [23/May/2026:21:14:30 +0700] "GET /images/images/cache.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.68.189.184 - - [23/May/2026:21:28:25 +0700] "GET /.well-known/acme-challenge/7WLX2NW1DUXPHMPON0K4XOFQED200UG8 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 163.44.198.39 - - [23/May/2026:21:28:26 +0700] "GET /.well-known/acme-challenge/M1WU3TP63LKA0DGXPEAGWG3JER5ZG6PW HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 163.44.198.39 - - [23/May/2026:21:28:26 +0700] "GET /.well-known/acme-challenge/T15MMTZ_NDA1XMAXO3X4B8G7ILM77Q69 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 172.68.189.144 - - [24/May/2026:00:28:14 +0700] "GET /.well-known/acme-challenge/I2MHOR2S08DQODACDSN3B7FGL9C4E119 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 163.44.198.39 - - [24/May/2026:00:28:15 +0700] "GET /.well-known/acme-challenge/7QZI31BVHW0IKDNZ-5LN1OKQ6GOV19A5 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 163.44.198.39 - - [24/May/2026:00:28:15 +0700] "GET /.well-known/acme-challenge/FYJB9_FMJD_0YA7H9RL87R7M7E8M22Q5 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 205.210.31.67 - - [24/May/2026:02:06:01 +0700] "GET / HTTP/1.1" 200 - "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.68.189.145 - - [24/May/2026:03:28:12 +0700] "GET /.well-known/acme-challenge/H_9-04Y1ZSJGCOWFPGTIFZO4T9X9W99B HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 163.44.198.39 - - [24/May/2026:03:28:12 +0700] "GET /.well-known/acme-challenge/E89V3M0XMGNIA15OOVCZ0KMWOV9C2R8Q HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 163.44.198.39 - - [24/May/2026:03:28:12 +0700] "GET /.well-known/acme-challenge/3CKB82R20ACRTCSGKCDCX56USKDVFWP5 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 172.71.183.151 - - [24/May/2026:05:22:27 +0700] "GET /.git/config HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; GitFinder/1.0)" 172.68.189.145 - - [24/May/2026:06:28:11 +0700] "GET /.well-known/acme-challenge/IAPMY7OFLNY96N5O1O8MI07XLFI2INVS HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 163.44.198.39 - - [24/May/2026:06:28:12 +0700] "GET /.well-known/acme-challenge/57RKTYUDYYXJ60YR3181IZU02P1V7E6_ HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 163.44.198.39 - - [24/May/2026:06:28:12 +0700] "GET /.well-known/acme-challenge/ET-VOQYL2J_O4QTKN020VNU5T9N1TCS4 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 205.210.31.83 - - [24/May/2026:07:19:01 +0700] "GET /webshell HTTP/1.1" 404 - "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 205.210.31.228 - - [24/May/2026:07:23:02 +0700] "GET /shell.php HTTP/1.1" 404 - "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.69.176.102 - - [24/May/2026:07:27:52 +0700] "GET /wp-content/plugins/admin.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:52 +0700] "GET /admin.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:52 +0700] "GET /wk/index.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:52 +0700] "GET /supyffqkrnyxagxcjucnCdefault.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:52 +0700] "GET /elp.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:53 +0700] "GET /adminfuns.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:53 +0700] "GET /.tmb/cloud.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:53 +0700] "GET /php8.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.102 - - [24/May/2026:07:27:53 +0700] "GET /.well-known HTTP/1.1" 301 242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:53 +0700] "GET /inputs.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:53 +0700] "GET /goods.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:53 +0700] "GET /classwithtostring.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.106.27 - - [24/May/2026:07:27:53 +0700] "GET /simple.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.107.16 - - [24/May/2026:07:27:53 +0700] "GET /wp-mail.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.106.27 - - [24/May/2026:07:27:53 +0700] "GET /about.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.107.16 - - [24/May/2026:07:27:53 +0700] "GET /1.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.106.27 - - [24/May/2026:07:27:53 +0700] "GET /file.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.107.16 - - [24/May/2026:07:27:53 +0700] "GET /404.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.106.27 - - [24/May/2026:07:27:53 +0700] "GET /wp-login.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.107.16 - - [24/May/2026:07:27:53 +0700] "GET /index.php/feed/atom HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.106.27 - - [24/May/2026:07:27:53 +0700] "GET /php.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:53 +0700] "GET /wp-includes/Text/Diff/Engine.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:53 +0700] "GET /wp-content/admin.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:53 +0700] "GET /wp-content/themes/admin.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:53 +0700] "GET /7.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:53 +0700] "GET /wp-content/index.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:54 +0700] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:54 +0700] "GET /atomlib.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.107.16 - - [24/May/2026:07:27:54 +0700] "GET /chosen.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.107.16 - - [24/May/2026:07:27:54 +0700] "GET /css.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.106.27 - - [24/May/2026:07:27:54 +0700] "GET /files.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.107.16 - - [24/May/2026:07:27:54 +0700] "GET /index/function.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.106.27 - - [24/May/2026:07:27:54 +0700] "GET /buy.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.107.16 - - [24/May/2026:07:27:54 +0700] "GET /info.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.106.27 - - [24/May/2026:07:27:54 +0700] "GET /wp.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.107.16 - - [24/May/2026:07:27:54 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.106.27 - - [24/May/2026:07:27:54 +0700] "GET /wp-config-sample.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.107.16 - - [24/May/2026:07:27:54 +0700] "GET /wp-content/themes/x/bypass.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.106.27 - - [24/May/2026:07:27:54 +0700] "GET /666.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.102 - - [24/May/2026:07:27:54 +0700] "GET /bgymj.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:54 +0700] "GET /control.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:54 +0700] "GET /randkeyword.PhP7 HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:54 +0700] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:54 +0700] "GET /wp-includes/assets/ty.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:54 +0700] "GET /file61.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:54 +0700] "GET /p.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:54 +0700] "GET /ms-edit.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:54 +0700] "GET /alfanew.PHP7 HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:54 +0700] "GET /cgi-bin HTTP/1.1" 301 238 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:54 +0700] "GET /dx.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:54 +0700] "GET /wp-admin/maint/index.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:54 +0700] "GET /.well-known/pki-validation HTTP/1.1" 301 257 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:54 +0700] "GET /doc.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:55 +0700] "GET /tool.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.102 - - [24/May/2026:07:27:55 +0700] "GET /xx.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:55 +0700] "GET /xxx.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:55 +0700] "GET /100.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:55 +0700] "GET /wp-admin/network/about.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:55 +0700] "GET /wp-blog.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.107.16 - - [24/May/2026:07:27:55 +0700] "GET /wp-content/themes/index.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.106.27 - - [24/May/2026:07:27:55 +0700] "GET /wp-includes/images HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.107.16 - - [24/May/2026:07:27:55 +0700] "GET /data.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.106.27 - - [24/May/2026:07:27:55 +0700] "GET /ioxi-o.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.107.16 - - [24/May/2026:07:27:55 +0700] "GET /as.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:55 +0700] "GET /term.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.106.27 - - [24/May/2026:07:27:55 +0700] "GET /vx.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.107.16 - - [24/May/2026:07:27:55 +0700] "GET /wp-includes/PHPMailer HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.106.27 - - [24/May/2026:07:27:55 +0700] "GET /a7.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.107.16 - - [24/May/2026:07:27:55 +0700] "GET /wp-admin/css/colors/ectoplasm HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.106.27 - - [24/May/2026:07:27:55 +0700] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.107.16 - - [24/May/2026:07:27:55 +0700] "GET /222.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.106.27 - - [24/May/2026:07:27:55 +0700] "GET /7logs.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.107.16 - - [24/May/2026:07:27:55 +0700] "GET /a.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.106.27 - - [24/May/2026:07:27:55 +0700] "GET /abc.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.107.16 - - [24/May/2026:07:27:55 +0700] "GET /fone1.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.106.27 - - [24/May/2026:07:27:55 +0700] "GET /lib.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.107.16 - - [24/May/2026:07:27:55 +0700] "GET /sadcut1.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.106.27 - - [24/May/2026:07:27:56 +0700] "GET /wp-includes/interactivity-api/index.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.107.16 - - [24/May/2026:07:27:56 +0700] "GET /xmlrpc.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.106.27 - - [24/May/2026:07:27:56 +0700] "GET /aa.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.107.16 - - [24/May/2026:07:27:56 +0700] "GET /admin.php/wp-includes/certificates/about.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.106.27 - - [24/May/2026:07:27:56 +0700] "GET /amax.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.107.16 - - [24/May/2026:07:27:56 +0700] "GET /av.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.106.27 - - [24/May/2026:07:27:56 +0700] "GET /function/function.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.107.16 - - [24/May/2026:07:27:56 +0700] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.106.27 - - [24/May/2026:07:27:56 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.107.16 - - [24/May/2026:07:27:56 +0700] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.106.27 - - [24/May/2026:07:27:56 +0700] "GET /wp-content/plugins/index.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.107.16 - - [24/May/2026:07:27:56 +0700] "GET /wp-content/upgrade/index.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.106.27 - - [24/May/2026:07:27:56 +0700] "GET /ahax.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.107.16 - - [24/May/2026:07:27:56 +0700] "GET /alfa.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.106.27 - - [24/May/2026:07:27:56 +0700] "GET /bolt.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.107.16 - - [24/May/2026:07:27:56 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.158.106.27 - - [24/May/2026:07:27:56 +0700] "GET /wp-includes/Text/index.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:56 +0700] "GET /wp-signin.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:56 +0700] "GET /x.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:56 +0700] "GET /about/function.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.135 - - [24/May/2026:07:27:56 +0700] "GET /bless.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.102 - - [24/May/2026:07:27:56 +0700] "GET /content.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.102 - - [24/May/2026:07:27:56 +0700] "GET /radio.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.102 - - [24/May/2026:07:27:56 +0700] "GET /wp-content/about.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.102 - - [24/May/2026:07:27:56 +0700] "GET /wp-content/uploads/admin.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.102 - - [24/May/2026:07:27:57 +0700] "GET /wp-includes/pomo HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.102 - - [24/May/2026:07:27:57 +0700] "GET /.dj/index.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.102 - - [24/May/2026:07:27:57 +0700] "GET /aaa.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.102 - - [24/May/2026:07:27:57 +0700] "GET /abcd.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.176.102 - - [24/May/2026:07:27:57 +0700] "GET /admin/function.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 198.235.24.195 - - [24/May/2026:07:29:01 +0700] "GET /shell HTTP/1.1" 404 - "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 147.185.132.58 - - [24/May/2026:07:39:36 +0700] "GET /webshell.php HTTP/1.1" 404 - "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.70.50.20 - - [24/May/2026:07:39:46 +0700] "GET /inputs.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:39:47 +0700] "GET /file.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.20 - - [24/May/2026:07:39:47 +0700] "GET /goods.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:39:47 +0700] "GET /ms-edit.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.20 - - [24/May/2026:07:39:48 +0700] "GET /simple.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:39:48 +0700] "GET /bgymj.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.20 - - [24/May/2026:07:39:48 +0700] "GET /wp-content/plugins/twenty/login.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.20 - - [24/May/2026:07:39:48 +0700] "GET /404.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:39:49 +0700] "GET /file3.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.20 - - [24/May/2026:07:39:49 +0700] "GET /wp-mail.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:39:49 +0700] "GET /about.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.20 - - [24/May/2026:07:39:49 +0700] "GET /wp.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:39:50 +0700] "GET /.dj/index.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.20 - - [24/May/2026:07:39:50 +0700] "GET /adminfuns.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:39:50 +0700] "GET /php8.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.20 - - [24/May/2026:07:39:50 +0700] "GET /classwithtostring.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:39:51 +0700] "GET /info.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.20 - - [24/May/2026:07:39:51 +0700] "GET /ioxi-o.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:39:51 +0700] "GET /011i.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.20 - - [24/May/2026:07:39:51 +0700] "GET /edit.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:39:52 +0700] "GET /sid3.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.20 - - [24/May/2026:07:39:52 +0700] "GET /load.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:39:52 +0700] "GET /166.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:39:52 +0700] "GET /wp-mail.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:39:53 +0700] "GET /leaf.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:39:53 +0700] "GET /grsiuk.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.130.82 - - [24/May/2026:07:39:53 +0700] "GET /8.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.130.5 - - [24/May/2026:07:39:54 +0700] "GET /fs.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.130.82 - - [24/May/2026:07:39:54 +0700] "GET /ws38.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:39:55 +0700] "GET /a7.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.130.5 - - [24/May/2026:07:39:55 +0700] "GET /classsmtps.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.130.82 - - [24/May/2026:07:39:55 +0700] "GET /amax.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.130.5 - - [24/May/2026:07:39:55 +0700] "GET /CDX1.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.130.82 - - [24/May/2026:07:39:56 +0700] "GET /rip.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.130.5 - - [24/May/2026:07:39:56 +0700] "GET /1.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.130.82 - - [24/May/2026:07:39:56 +0700] "GET /chosen.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.130.5 - - [24/May/2026:07:39:56 +0700] "GET /css.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.130.82 - - [24/May/2026:07:39:57 +0700] "GET /php.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.130.5 - - [24/May/2026:07:39:57 +0700] "GET /wp-Blogs.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:39:57 +0700] "GET /wp-content/index.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:39:57 +0700] "GET /wp-content/plugins/beteng88/ws83.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:39:58 +0700] "GET /ws83.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:39:58 +0700] "GET /file61.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:39:58 +0700] "GET /sadcut1.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:39:59 +0700] "GET /y.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:39:59 +0700] "GET /akcc.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:39:59 +0700] "GET /wp-admin/user/12.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:39:59 +0700] "GET /index/function.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:40:00 +0700] "GET /term.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:40:00 +0700] "GET /666.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:40:00 +0700] "GET /7.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:40:00 +0700] "GET /wp-config-sample.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:40:01 +0700] "GET /log.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:40:01 +0700] "GET /a5.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:40:01 +0700] "GET /aa.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:40:02 +0700] "GET /bolt.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:40:02 +0700] "GET /x.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:40:02 +0700] "GET /jga.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:40:02 +0700] "GET /k.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:40:03 +0700] "GET /vx.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:40:03 +0700] "GET /ws77.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:40:03 +0700] "GET /2.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:40:03 +0700] "GET /abcd.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:40:04 +0700] "GET /wp-content/plugins/admin.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:40:04 +0700] "GET /asd.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:40:04 +0700] "GET /default.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:40:05 +0700] "GET /gettest.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:40:05 +0700] "GET /install.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:40:05 +0700] "GET /tfm.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:40:05 +0700] "GET /ws81.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:40:06 +0700] "GET /222.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:40:06 +0700] "GET /t.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:40:06 +0700] "GET /wp-admin/maint/index.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:40:07 +0700] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.70.50.145 - - [24/May/2026:07:40:07 +0700] "GET /a.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.130.82 - - [24/May/2026:07:40:07 +0700] "GET /a1.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.130.82 - - [24/May/2026:07:40:08 +0700] "GET /onclickfuns.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.130.82 - - [24/May/2026:07:40:08 +0700] "GET /w.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.130.82 - - [24/May/2026:07:40:08 +0700] "GET /wp-admin/maint/about.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.130.82 - - [24/May/2026:07:40:08 +0700] "GET /wp-content/plugins/index.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.130.82 - - [24/May/2026:07:40:09 +0700] "GET /wp-good.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.130.82 - - [24/May/2026:07:40:09 +0700] "GET /.info.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.130.82 - - [24/May/2026:07:40:09 +0700] "GET /config.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.130.82 - - [24/May/2026:07:40:09 +0700] "GET /item.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.130.82 - - [24/May/2026:07:40:10 +0700] "GET /m.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.130.82 - - [24/May/2026:07:40:10 +0700] "GET /rh.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"