OwlCyberSecurity - MANAGER

Edit File: ostwalcollegeofpharmacy.usois.in

173.208.198.210 - - [25/Apr/2026:09:30:03 -0400] "GET /?testPage HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 43.130.102.7 - - [25/Apr/2026:10:01:30 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 46.228.199.158 - - [25/Apr/2026:10:12:33 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 43.130.116.87 - - [25/Apr/2026:10:41:37 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 216.244.66.232 - - [25/Apr/2026:10:46:22 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 31.40.204.244 - - [25/Apr/2026:11:14:45 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; zh-CN; rv:1.9.0.8) Gecko/2009032609 Firefox/3.0.8 (.NET CLR 3.5.30729)" 216.244.66.232 - - [25/Apr/2026:11:31:48 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 51.68.111.245 - - [25/Apr/2026:11:48:53 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.111.245 - - [25/Apr/2026:11:48:54 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 20.199.101.230 - - [25/Apr/2026:12:48:52 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:48:53 -0400] "GET /file0.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:48:53 -0400] "GET /geforce.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:48:54 -0400] "GET /t3s.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:48:54 -0400] "GET /uwu.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:48:55 -0400] "GET /uwa.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:48:56 -0400] "GET /crgio.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:48:56 -0400] "GET /mini.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:48:57 -0400] "GET /wp-load.php HTTP/1.1" 403 1242 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:48:57 -0400] "GET /77.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:48:57 -0400] "GET /.sghb.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:48:58 -0400] "GET /zoko.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:48:58 -0400] "GET /solo1.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:48:59 -0400] "GET /locales.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:48:59 -0400] "GET /bgymj.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:48:59 -0400] "GET /pucci.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:00 -0400] "GET /wp-includes/blocks/details/ HTTP/1.1" 200 4468 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:00 -0400] "GET /.dj/index.php HTTP/1.1" 301 0 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:00 -0400] "GET /.dj/ HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:01 -0400] "GET /wp-includes/blocks/audio/ HTTP/1.1" 200 5524 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:01 -0400] "GET /.tmb/ HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:02 -0400] "GET /one.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:02 -0400] "GET /no20.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:03 -0400] "GET /wp-alone.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:03 -0400] "GET /yasnu.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:04 -0400] "GET //sl.php HTTP/1.1" 301 0 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:04 -0400] "GET /sl.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:04 -0400] "GET /vuln.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:05 -0400] "GET /wp-temp.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:05 -0400] "GET /wp-content/themes/twentytwentyfive/assets/ HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:06 -0400] "GET /wp-includes/blocks/buttons/ HTTP/1.1" 200 4482 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:06 -0400] "GET /class-bda.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:07 -0400] "GET /bhm.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:07 -0400] "GET /xmu.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:07 -0400] "GET /ref.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:08 -0400] "GET /wp-xme.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:08 -0400] "GET /adminer.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:09 -0400] "GET /ktfow.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:09 -0400] "GET /mode.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:10 -0400] "GET /2468.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:10 -0400] "GET //wp-admin/js/index.php HTTP/1.1" 404 1251 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:11 -0400] "GET /dx.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:11 -0400] "GET /amdin.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:12 -0400] "GET /huya.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:12 -0400] "GET /puc.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:13 -0400] "GET //themes.php HTTP/1.1" 301 0 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:13 -0400] "GET /themes.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:14 -0400] "GET /ewp.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:14 -0400] "GET /kikikoko.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:14 -0400] "GET /dx.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:15 -0400] "GET /xff.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:16 -0400] "GET /lupo.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:16 -0400] "GET /awa.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:17 -0400] "GET /popo.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:17 -0400] "GET /13.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:17 -0400] "GET /11.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:18 -0400] "GET /p.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:18 -0400] "GET //wp-includes/Requests/ HTTP/1.1" 200 1866 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:19 -0400] "GET /bthil.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:19 -0400] "GET //shell.php HTTP/1.1" 301 0 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:20 -0400] "GET /shell.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:20 -0400] "GET /seo.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:21 -0400] "GET /7.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:21 -0400] "GET /8.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:21 -0400] "GET /1.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:22 -0400] "GET /2.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:22 -0400] "GET /3.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:23 -0400] "GET /4.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:23 -0400] "GET /5.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:24 -0400] "GET /6.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:24 -0400] "GET /9.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:25 -0400] "GET /10.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:25 -0400] "GET /100.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:26 -0400] "GET /.well-known/nastar.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:26 -0400] "GET /2026w.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:27 -0400] "GET //xwpg.php HTTP/1.1" 301 0 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:27 -0400] "GET /xwpg.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:28 -0400] "GET /ass.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:28 -0400] "GET /about.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:29 -0400] "GET /no18.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:29 -0400] "GET /fine.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:30 -0400] "GET /hplfuns.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:30 -0400] "GET /xa.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:30 -0400] "GET //admin.php HTTP/1.1" 301 0 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:31 -0400] "GET /admin.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:31 -0400] "GET /inege.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:32 -0400] "GET /uuu.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:32 -0400] "GET /no1.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:33 -0400] "GET /w2025.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:33 -0400] "GET /fvvff.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:34 -0400] "GET /a2.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:34 -0400] "GET //edit.php HTTP/1.1" 403 1242 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:34 -0400] "GET /ioxi-o.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:35 -0400] "GET /wp-content/admin.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:35 -0400] "GET /66.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:36 -0400] "GET /a5.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:36 -0400] "GET /ol.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:37 -0400] "GET //f6.php HTTP/1.1" 301 0 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:37 -0400] "GET /f6.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:38 -0400] "GET /inputs.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:38 -0400] "GET /style.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:39 -0400] "GET //av.php HTTP/1.1" 301 0 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:39 -0400] "GET /av.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:40 -0400] "GET /wp-admin/css/bolt.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:40 -0400] "GET /wp-act.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:41 -0400] "GET /classwithtostring.php?p= HTTP/1.1" 301 0 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:41 -0400] "GET /classwithtostring.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:41 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 404 1251 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:42 -0400] "GET /sbhu.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:42 -0400] "GET /wp-blog.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:43 -0400] "GET //wp-includes/js/jquery/ HTTP/1.1" 200 7358 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:43 -0400] "GET //wp-content/admin.php HTTP/1.1" 301 0 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:43 -0400] "GET /wp-content/admin.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:44 -0400] "GET /ms-edit.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:44 -0400] "GET //adminfuns.php HTTP/1.1" 301 0 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:45 -0400] "GET /adminfuns.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:45 -0400] "GET /goods.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:46 -0400] "GET /ms-edit.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:46 -0400] "GET /222.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:47 -0400] "GET //cgi-bin/index.php HTTP/1.1" 404 1251 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:47 -0400] "GET /fff.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:47 -0400] "GET /wp-content/ HTTP/1.1" 200 4412 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:47 -0400] "GET /makeasmtp.php?p= HTTP/1.1" 301 0 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:48 -0400] "GET /makeasmtp.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:48 -0400] "GET //admin1.php HTTP/1.1" 301 0 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:49 -0400] "GET /admin1.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:49 -0400] "GET //wp-includes/css/dist/ HTTP/1.1" 200 6168 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:50 -0400] "GET /BDKR28WP.php HTTP/1.1" 500 2818 "-" "-" 162.0.209.141 - - [25/Apr/2026:12:49:51 -0400] "POST /wp-cron.php?doing_wp_cron=1777135791.1612379550933837890625 HTTP/1.1" 301 795 "-" "WordPress/6.4.2; https://ostwalcollegeofpharmacy.com" 20.199.101.230 - - [25/Apr/2026:12:49:50 -0400] "GET //wp-includes/l10n/ HTTP/1.1" 301 0 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:51 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:51 -0400] "GET /wp-content/uploads/ HTTP/1.1" 200 4137 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:51 -0400] "GET /wp.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:52 -0400] "GET /wp-admin/js/fi.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:52 -0400] "GET /fe5.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:53 -0400] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 404 1251 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:53 -0400] "GET /av.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:53 -0400] "GET /abcd.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:54 -0400] "GET //a1.php HTTP/1.1" 301 0 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:54 -0400] "GET /a1.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:55 -0400] "GET /update/f35.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:56 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:56 -0400] "GET /f35.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:57 -0400] "GET //wp-includes/css/index.php?p= HTTP/1.1" 404 1251 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:57 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 200 9392 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:57 -0400] "GET /k.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:57 -0400] "GET /bal.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:58 -0400] "GET /in.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:58 -0400] "GET /gssdd.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:59 -0400] "GET //cgi-bin/admin.php HTTP/1.1" 301 0 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:49:59 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:50:00 -0400] "GET /bs1.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:50:00 -0400] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:50:01 -0400] "GET /axx.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:50:01 -0400] "GET /gettest.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:50:02 -0400] "GET /acp.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:50:02 -0400] "GET /file48.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:50:03 -0400] "GET /wp-content/ HTTP/1.1" 200 4412 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:50:03 -0400] "GET /simple.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:50:04 -0400] "GET /drykl.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:50:04 -0400] "GET /xxx.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:50:05 -0400] "GET /hypo.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:50:05 -0400] "GET /file18.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:50:06 -0400] "GET /xwx1.php HTTP/1.1" 500 2818 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:50:06 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 200 3874 "-" "-" 20.199.101.230 - - [25/Apr/2026:12:50:07 -0400] "GET /chosen.php HTTP/1.1" 500 2818 "-" "-" 49.233.45.47 - - [25/Apr/2026:13:04:39 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.173.121.77 - - [25/Apr/2026:13:21:10 -0400] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:29 -0400] "GET /js/fallbackapi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:29 -0400] "GET /wp-content/plugins/elfsight-block/fallbackapi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:29 -0400] "GET /wp-content/themes/twentytwentyfour/fallback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:29 -0400] "GET /emailing/fallbackapi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:29 -0400] "GET /wp-content/plugins/cpi-wp-migration/storage/php8ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:31 -0400] "GET /torinitydemo/demo360view/img/php8ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:31 -0400] "GET /wp-admin/ms-add.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:31 -0400] "GET /signature/fallbackapi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:31 -0400] "GET /wp-admin/sh787.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:31 -0400] "GET /wp-admin/dsx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:32 -0400] "GET /wp-a-1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:32 -0400] "GET /.wp-cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:32 -0400] "GET /get.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:32 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:32 -0400] "GET /00.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:33 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:33 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:33 -0400] "GET /0byte.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:33 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:33 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:33 -0400] "GET /123.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:33 -0400] "GET /4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:33 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:33 -0400] "GET /3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:33 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:34 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:34 -0400] "GET /500.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:34 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:34 -0400] "GET /406.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:34 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:36 -0400] "GET /666.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:36 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:36 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:36 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:36 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:37 -0400] "GET /fallback2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:37 -0400] "GET /a1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:37 -0400] "GET /fallbackapi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:37 -0400] "GET /classes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:37 -0400] "GET /profile-update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:38 -0400] "GET /php8ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:38 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:38 -0400] "GET /abc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:38 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:38 -0400] "GET /administrator.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:39 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:39 -0400] "GET /alf4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:39 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:39 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:39 -0400] "GET /alfa123.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:40 -0400] "GET /alwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:40 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:40 -0400] "GET /alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:40 -0400] "GET /anon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:40 -0400] "GET /anons79.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:41 -0400] "GET /anonsec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:41 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:41 -0400] "GET /asd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:41 -0400] "GET /assets/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:41 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:42 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:42 -0400] "GET /base.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:42 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:42 -0400] "GET /conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:42 -0400] "GET /batm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:43 -0400] "GET /black.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:43 -0400] "GET /blog/wp-includes/fonts/dev.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:43 -0400] "GET /blog/wp-includes/fonts/iqb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:43 -0400] "GET /by.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:43 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:44 -0400] "GET /config_hoad0jvq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:44 -0400] "GET /sh787.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:44 -0400] "GET /fallbackapi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:44 -0400] "GET /nss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:44 -0400] "GET /cmdX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:45 -0400] "GET /class-wp-nav.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:45 -0400] "GET /fallback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:45 -0400] "GET /navbar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:45 -0400] "GET /site-add.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:45 -0400] "GET /wp-media.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:46 -0400] "GET /yanze.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:46 -0400] "GET /sitemap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:46 -0400] "GET /config_hoad0jvq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:46 -0400] "GET /php8ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:46 -0400] "GET /ms-add.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:47 -0400] "GET /corc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:47 -0400] "GET /aaaindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:47 -0400] "GET /mod_webshell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:47 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:47 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:47 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:47 -0400] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:47 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:47 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:47 -0400] "GET /wp-includes/sitemaps/providers/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:49 -0400] "GET /wp-admin/css/colors/ectoplasm/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:49 -0400] "GET /wp-includes/PHPMailer/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:49 -0400] "GET /wp-includes/pomo/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:49 -0400] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:49 -0400] "GET /wp-includes/certificates/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:50 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:50 -0400] "GET /wp-includes/theme-compat/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:50 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:50 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:50 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:51 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:51 -0400] "GET /wp-includes/SimplePie/Content/Type/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:51 -0400] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:51 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:51 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:52 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:52 -0400] "GET /wp-content/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:52 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:52 -0400] "GET /wp-admin/maint/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:52 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:54 -0400] "GET /wp-includes/PHPMailer/IMAP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:54 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:54 -0400] "GET /wp-admin/profile-update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:54 -0400] "GET /wp-admin/php8ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:54 -0400] "GET /wp-admin/profile-update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:55 -0400] "GET /wp-admin/profile-update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:55 -0400] "GET /wp-content/plugins/elfsight-blocks/blocks-package.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:55 -0400] "GET /wp-content/plugins/cache/php8ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:55 -0400] "GET /wp-admin/fallbackapi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:55 -0400] "GET /wp-content/plugins/elfsight-blocks/fallback2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:56 -0400] "GET /wp-includes/assets/php8ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:56 -0400] "GET /wp-content/plugins/elfsight-blocks/fallbackapi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:56 -0400] "GET /wp-admin/profile-update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:56 -0400] "GET /images/php8ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:56 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:57 -0400] "GET /wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:57 -0400] "GET /bypas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:57 -0400] "GET /byp403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:57 -0400] "GET /byp7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:57 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:58 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:58 -0400] "GET /byps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:58 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:58 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:58 -0400] "GET /cgi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:58 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:58 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:58 -0400] "GET /cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:58 -0400] "GET /compat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:36:59 -0400] "GET /con.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:00 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:00 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:00 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:00 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:00 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:01 -0400] "GET /docindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:01 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:01 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:01 -0400] "GET /db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:01 -0400] "GET /dev.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:02 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:02 -0400] "GET /evil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:02 -0400] "GET /error.php?phpshells HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:02 -0400] "GET /eagle.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:02 -0400] "GET /exploit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:03 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:03 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:03 -0400] "GET /fierza.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:03 -0400] "GET /f0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:03 -0400] "GET /fg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:04 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:04 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:04 -0400] "GET /flame.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:04 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:04 -0400] "GET /foxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:05 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:05 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:05 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:05 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:05 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:06 -0400] "GET /gelay.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:06 -0400] "GET /green.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:06 -0400] "GET /haxor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:06 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:06 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:07 -0400] "GET /hi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:07 -0400] "GET /idx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:07 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:07 -0400] "GET /id.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:07 -0400] "GET /if.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:08 -0400] "GET /images/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:08 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:08 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:08 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:08 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:09 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:09 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:09 -0400] "GET /iq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:09 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:09 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:10 -0400] "GET /js.php?get HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:10 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:10 -0400] "GET /js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:10 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:10 -0400] "GET /kn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:11 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:11 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:11 -0400] "GET /load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:11 -0400] "GET /loader/ff.php?pass=shell HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:11 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:12 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:12 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:12 -0400] "GET /local.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:12 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:12 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:13 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:13 -0400] "GET /lx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:13 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:13 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:13 -0400] "GET /mad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:14 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:14 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:14 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:14 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:14 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:15 -0400] "GET /mass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:15 -0400] "GET /min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:15 -0400] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:15 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:15 -0400] "GET /mas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:16 -0400] "GET /minishell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:16 -0400] "GET /mrjn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:16 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:16 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:16 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:16 -0400] "GET /nn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:16 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:16 -0400] "GET /ninja.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:16 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:16 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:17 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:17 -0400] "GET /phpinfo.php?re@=vo@ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:17 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:17 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:17 -0400] "GET /priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:18 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:18 -0400] "GET /qindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:18 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:18 -0400] "GET /r00t.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:18 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:19 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:19 -0400] "GET /radio.php?pass=shell HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:19 -0400] "GET /raw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:19 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:19 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:20 -0400] "GET /shl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:20 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:20 -0400] "GET /seo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:20 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:20 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:21 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:21 -0400] "GET /Sym.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:21 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:21 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:21 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:22 -0400] "GET /tes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:22 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:22 -0400] "GET /symlink.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:22 -0400] "GET /sys.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:22 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:23 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:23 -0400] "GET /unknown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:23 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:23 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:23 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:24 -0400] "GET /upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:24 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:24 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:24 -0400] "GET /uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:24 -0400] "GET /uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:24 -0400] "GET /usr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:24 -0400] "GET /vuln.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:24 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:24 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:24 -0400] "GET /wp_cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:26 -0400] "GET /wp-.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:26 -0400] "GET /wp-about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:26 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:26 -0400] "GET /wp-access.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:26 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:26 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:26 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:26 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:26 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:26 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:28 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:28 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:28 -0400] "GET /wp-admin/includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:28 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:28 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:29 -0400] "GET /wp-admin/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:29 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:29 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:29 -0400] "GET /wp-admin/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:29 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:30 -0400] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:30 -0400] "GET /wp-admin/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:30 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36" 103.77.106.41 - - [25/Apr/2026:13:37:30 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 Chrome/114.0.0.0 Mobile Safari/537.36"