File: /var/www/ilya/data/webdav/webdav/logs/povoleni.ru.access.log
91.108.5.147 - - [16/Apr/2026:00:00:53 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
74.7.230.45 - - [16/Apr/2026:00:01:32 +0200] "GET /robots.txt HTTP/1.1" 403 4087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot"
91.108.5.147 - - [16/Apr/2026:00:02:44 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:04:26 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:00:05:02 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:00:06:00 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:07:38 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:09:29 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
95.216.2.94 - - [16/Apr/2026:00:10:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:00:10:58 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:12:40 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:14:01 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:00:15:01 +0200] "GET /services/get_news/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
95.216.2.94 - - [16/Apr/2026:00:15:01 +0200] "GET /services/check/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:00:15:40 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:17:03 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:18:51 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
95.216.2.94 - - [16/Apr/2026:00:20:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:00:20:30 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:21:49 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:22:55 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:24:09 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
95.216.2.94 - - [16/Apr/2026:00:25:01 +0200] "GET /services/check/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:00:25:55 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:27:17 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:28:41 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
95.216.2.94 - - [16/Apr/2026:00:30:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
95.216.2.94 - - [16/Apr/2026:00:30:01 +0200] "GET /services/get_news/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:00:30:25 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:31:47 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:32:54 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:34:31 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:00:35:01 +0200] "GET /services/check/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:00:35:31 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:36:38 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:38:31 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
45.84.107.222 - - [16/Apr/2026:00:39:15 +0200] "GET /.DS_Store HTTP/1.1" 403 9131 "-" "Go-http-client/1.1"
185.220.101.9 - - [16/Apr/2026:00:39:18 +0200] "GET /.git/config HTTP/1.1" 403 9131 "-" "Go-http-client/1.1"
192.42.116.99 - - [16/Apr/2026:00:39:21 +0200] "GET /.git/config HTTP/1.1" 403 4087 "-" "Go-http-client/1.1"
185.220.101.22 - - [16/Apr/2026:00:39:33 +0200] "GET /.DS_Store HTTP/1.1" 403 9131 "-" "Go-http-client/1.1"
95.216.2.94 - - [16/Apr/2026:00:40:01 +0200] "GET /services/check/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:00:40:12 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
192.210.150.196 - - [16/Apr/2026:00:40:13 +0200] "GET / HTTP/1.1" 403 9150 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:40.0) Gecko/20100101 Firefox/40.0"
192.210.150.196 - - [16/Apr/2026:00:40:15 +0200] "GET / HTTP/1.1" 403 4106 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:40.0) Gecko/20100101 Firefox/40.0"
91.108.5.147 - - [16/Apr/2026:00:41:14 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:42:27 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:44:17 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:00:45:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
95.216.2.94 - - [16/Apr/2026:00:45:01 +0200] "GET /services/get_news/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:00:45:23 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:47:03 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:48:16 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
34.195.16.23 - - [16/Apr/2026:00:49:51 +0200] "GET /robots.txt HTTP/1.1" 403 9199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)"
95.216.2.94 - - [16/Apr/2026:00:50:01 +0200] "GET /services/check/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:00:50:01 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:51:50 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:53:20 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:54:47 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:00:55:01 +0200] "GET /services/check/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:00:55:58 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:57:36 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:59:17 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
95.216.2.94 - - [16/Apr/2026:01:00:01 +0200] "GET /services/get_news/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
95.216.2.94 - - [16/Apr/2026:01:00:01 +0200] "GET /services/check/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:01:00:57 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
54.172.209.207 - - [16/Apr/2026:01:01:42 +0200] "GET /robots.txt HTTP/1.1" 403 9199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)"
91.108.5.147 - - [16/Apr/2026:01:02:21 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:03:26 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:04:47 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
95.216.2.94 - - [16/Apr/2026:01:05:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:01:05:58 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:07:09 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:08:15 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
40.113.4.217 - - [16/Apr/2026:01:09:59 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 4087 "-" "-"
40.113.4.217 - - [16/Apr/2026:01:09:59 +0200] "GET /1index.php HTTP/1.1" 403 4087 "-" "-"
40.113.4.217 - - [16/Apr/2026:01:09:59 +0200] "GET /cs.php HTTP/1.1" 403 4087 "-" "-"
40.113.4.217 - - [16/Apr/2026:01:09:59 +0200] "GET /k.php HTTP/1.1" 403 4087 "-" "-"
40.113.4.217 - - [16/Apr/2026:01:09:59 +0200] "GET /shell20211028.php HTTP/1.1" 403 4087 "-" "-"
40.113.4.217 - - [16/Apr/2026:01:09:59 +0200] "GET /shadow-bot.php HTTP/1.1" 403 4087 "-" "-"
95.216.2.94 - - [16/Apr/2026:01:10:01 +0200] "GET /services/check/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:01:10:03 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
104.210.140.131 - - [16/Apr/2026:01:10:48 +0200] "GET /robots.txt HTTP/1.1" 403 9178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
91.108.5.147 - - [16/Apr/2026:01:11:31 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:12:54 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:14:15 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
95.216.2.94 - - [16/Apr/2026:01:15:01 +0200] "GET /services/check/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
95.216.2.94 - - [16/Apr/2026:01:15:01 +0200] "GET /services/get_news/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:01:15:18 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:16:22 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
20.235.69.36 - - [16/Apr/2026:01:17:26 +0200] "GET /admin.php HTTP/1.1" 403 9187 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:27 +0200] "GET /inputs.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:27 +0200] "GET /file.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:27 +0200] "GET /goods.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:27 +0200] "GET /ms-edit.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:27 +0200] "GET /bgymj.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:27 +0200] "GET /wp-content/plugins/twenty/login.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:28 +0200] "GET /404.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:28 +0200] "GET /file3.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:28 +0200] "GET /wp-mail.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:28 +0200] "GET /about.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:28 +0200] "GET /wp.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:28 +0200] "GET /.dj/index.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:29 +0200] "GET /adminfuns.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:29 +0200] "GET /php8.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:29 +0200] "GET /classwithtostring.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:29 +0200] "GET /info.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:29 +0200] "GET /ioxi-o.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:29 +0200] "GET /011i.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:29 +0200] "GET /sid3.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:30 +0200] "GET /166.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:30 +0200] "GET /wp-mail.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:30 +0200] "GET /leaf.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:30 +0200] "GET /grsiuk.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:30 +0200] "GET /8.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:30 +0200] "GET /fs.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:31 +0200] "GET /ws38.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:31 +0200] "GET /a7.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:31 +0200] "GET /classsmtps.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:31 +0200] "GET /amax.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:31 +0200] "GET /CDX1.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:31 +0200] "GET /rip.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:31 +0200] "GET /1.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:32 +0200] "GET /chosen.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:32 +0200] "GET /css.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:32 +0200] "GET /php.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:32 +0200] "GET /wp-Blogs.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:32 +0200] "GET /wp-content/index.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:32 +0200] "GET /wp-content/plugins/beteng88/ws83.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:33 +0200] "GET /ws83.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:33 +0200] "GET /file61.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:33 +0200] "GET /sadcut1.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:33 +0200] "GET /y.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:33 +0200] "GET /akcc.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:33 +0200] "GET /wp-admin/user/12.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:34 +0200] "GET /index/function.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:34 +0200] "GET /term.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:34 +0200] "GET /666.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:34 +0200] "GET /7.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:34 +0200] "GET /wp-config-sample.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:34 +0200] "GET /log.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:34 +0200] "GET /a5.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:35 +0200] "GET /aa.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:35 +0200] "GET /bolt.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:35 +0200] "GET /x.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:35 +0200] "GET /jga.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:35 +0200] "GET /k.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:35 +0200] "GET /vx.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:36 +0200] "GET /ws77.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:36 +0200] "GET /2.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:36 +0200] "GET /abcd.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:36 +0200] "GET /wp-content/plugins/admin.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:36 +0200] "GET /asd.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:36 +0200] "GET /default.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:37 +0200] "GET /gettest.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:37 +0200] "GET /install.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:37 +0200] "GET /tfm.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:37 +0200] "GET /ws81.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:37 +0200] "GET /222.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:37 +0200] "GET /tmp.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:37 +0200] "GET /wp-admin/maint/index.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:38 +0200] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:38 +0200] "GET /a.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:38 +0200] "GET /a1.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:38 +0200] "GET /onclickfuns.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:38 +0200] "GET /w.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:38 +0200] "GET /wp-admin/maint/about.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:39 +0200] "GET /wp-content/plugins/index.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:39 +0200] "GET /wp-good.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:39 +0200] "GET /.info.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:39 +0200] "GET /config.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:39 +0200] "GET /item.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:39 +0200] "GET /m.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:40 +0200] "GET /rh.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
91.108.5.147 - - [16/Apr/2026:01:17:57 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
170.106.180.153 - - [16/Apr/2026:01:18:00 +0200] "GET / HTTP/1.1" 403 4106 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
91.108.5.147 - - [16/Apr/2026:01:19:32 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
95.216.2.94 - - [16/Apr/2026:01:20:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:01:20:52 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:22:52 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:24:33 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:01:25:01 +0200] "GET /services/check/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:01:25:36 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:26:56 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:28:19 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:29:33 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
95.216.2.94 - - [16/Apr/2026:01:30:01 +0200] "GET /services/check/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
95.216.2.94 - - [16/Apr/2026:01:30:01 +0200] "GET /services/get_news/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:01:30:57 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:31:59 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:33:19 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:34:46 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
95.216.2.94 - - [16/Apr/2026:01:35:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:01:36:28 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
185.101.254.238 - - [16/Apr/2026:01:37:12 +0200] "GET / HTTP/1.1" 403 4106 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
91.108.5.147 - - [16/Apr/2026:01:37:44 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:39:37 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:01:40:01 +0200] "GET /services/check/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:01:41:36 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:43:34 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
95.216.2.94 - - [16/Apr/2026:01:45:01 +0200] "GET /services/check/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
95.216.2.94 - - [16/Apr/2026:01:45:01 +0200] "GET /services/get_news/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:01:45:29 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:47:10 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:49:06 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:01:50:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:01:50:15 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:51:39 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:53:03 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:01:55:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:01:55:02 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:56:55 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:58:51 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:02:00:02 +0200] "GET /services/get_news/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
95.216.2.94 - - [16/Apr/2026:02:00:02 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:02:00:32 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:02:20 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:04:15 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
95.216.2.94 - - [16/Apr/2026:02:05:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:02:05:34 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:07:19 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
204.12.208.18 - - [16/Apr/2026:02:07:37 +0200] "GET /wp-includes/ad068115/edit.php HTTP/1.1" 403 4143 "http://povoleni.ru/wp-includes/ad068115/edit.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:6.0.2) Gecko/20100101 Firefox/6.0.2"
204.12.208.18 - - [16/Apr/2026:02:07:38 +0200] "GET /wp-includes/ad068115/edit.php HTTP/1.1" 403 4087 "http://povoleni.ru/wp-includes/ad068115/edit.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
204.12.208.18 - - [16/Apr/2026:02:07:39 +0200] "GET /wp-includes/ad068115/edit.php HTTP/1.1" 403 4087 "http://povoleni.ru/wp-includes/ad068115/edit.php" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; ja-jp) AppleWebKit/523.12 (KHTML, like Gecko) Version/3.0.4 Safari/523.12"
91.108.5.147 - - [16/Apr/2026:02:09:18 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
95.216.2.94 - - [16/Apr/2026:02:10:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:02:10:50 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:12:32 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:13:36 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
95.216.2.94 - - [16/Apr/2026:02:15:01 +0200] "GET /services/check/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
95.216.2.94 - - [16/Apr/2026:02:15:01 +0200] "GET /services/get_news/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:02:15:12 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:16:33 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
20.193.52.210 - - [16/Apr/2026:02:17:39 +0200] "GET /admin.php HTTP/1.1" 403 9203 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:40 +0200] "GET /inputs.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:40 +0200] "GET /file.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:40 +0200] "GET /goods.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:41 +0200] "GET /ms-edit.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:41 +0200] "GET /bgymj.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:41 +0200] "GET /wp-content/plugins/twenty/login.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:41 +0200] "GET /404.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:42 +0200] "GET /file3.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:42 +0200] "GET /wp-mail.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:42 +0200] "GET /about.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:43 +0200] "GET /wp.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:43 +0200] "GET /.dj/index.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:43 +0200] "GET /adminfuns.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:43 +0200] "GET /php8.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:44 +0200] "GET /classwithtostring.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:44 +0200] "GET /info.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:44 +0200] "GET /ioxi-o.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:45 +0200] "GET /011i.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:45 +0200] "GET /sid3.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:45 +0200] "GET /166.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:45 +0200] "GET /wp-mail.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:46 +0200] "GET /leaf.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:46 +0200] "GET /grsiuk.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:46 +0200] "GET /8.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:47 +0200] "GET /fs.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:47 +0200] "GET /ws38.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:47 +0200] "GET /a7.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:48 +0200] "GET /classsmtps.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:48 +0200] "GET /amax.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:48 +0200] "GET /CDX1.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:48 +0200] "GET /rip.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:49 +0200] "GET /1.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:49 +0200] "GET /chosen.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:49 +0200] "GET /css.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:50 +0200] "GET /php.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:50 +0200] "GET /wp-Blogs.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:50 +0200] "GET /wp-content/index.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:50 +0200] "GET /wp-content/plugins/beteng88/ws83.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:51 +0200] "GET /ws83.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:51 +0200] "GET /file61.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:51 +0200] "GET /sadcut1.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:52 +0200] "GET /y.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:52 +0200] "GET /akcc.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:52 +0200] "GET /wp-admin/user/12.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:52 +0200] "GET /index/function.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:53 +0200] "GET /term.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:53 +0200] "GET /666.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:53 +0200] "GET /7.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:54 +0200] "GET /wp-config-sample.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:54 +0200] "GET /log.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:54 +0200] "GET /a5.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:55 +0200] "GET /aa.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:55 +0200] "GET /bolt.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:55 +0200] "GET /x.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:55 +0200] "GET /jga.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:56 +0200] "GET /k.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:56 +0200] "GET /vx.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:56 +0200] "GET /ws77.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:57 +0200] "GET /2.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:57 +0200] "GET /abcd.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:57 +0200] "GET /wp-content/plugins/admin.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:57 +0200] "GET /asd.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:58 +0200] "GET /default.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:58 +0200] "GET /gettest.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:58 +0200] "GET /install.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:59 +0200] "GET /tfm.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:59 +0200] "GET /ws81.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:59 +0200] "GET /222.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:00 +0200] "GET /tmp.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:00 +0200] "GET /wp-admin/maint/index.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:00 +0200] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:00 +0200] "GET /a.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:01 +0200] "GET /a1.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:01 +0200] "GET /onclickfuns.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:01 +0200] "GET /w.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:02 +0200] "GET /wp-admin/maint/about.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:02 +0200] "GET /wp-content/plugins/index.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:02 +0200] "GET /wp-good.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:02 +0200] "GET /.info.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:03 +0200] "GET /config.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:03 +0200] "GET /item.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:03 +0200] "GET /m.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:04 +0200] "GET /rh.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
91.108.5.147 - - [16/Apr/2026:02:18:25 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:19:46 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:02:20:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:02:21:30 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:22:35 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:23:47 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
23.101.8.77 - - [16/Apr/2026:02:24:46 +0200] "GET /100.php HTTP/1.1" 403 9203 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:46 +0200] "GET /7.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:46 +0200] "GET /php8.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:47 +0200] "GET /shell.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:47 +0200] "GET /adminfuns.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:47 +0200] "GET /wp.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:47 +0200] "GET /classwithtostring.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:47 +0200] "GET /abcd.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:48 +0200] "GET /as.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:48 +0200] "GET /Exception-class.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:48 +0200] "GET /1.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:48 +0200] "GET /222.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:49 +0200] "GET /item.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:49 +0200] "GET /past.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:49 +0200] "GET /t.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:49 +0200] "GET /license.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:49 +0200] "GET /b.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:50 +0200] "GET /network.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:50 +0200] "GET /V5.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:50 +0200] "GET /g.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:50 +0200] "GET /dialog.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:51 +0200] "GET /in.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:51 +0200] "GET /media.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:51 +0200] "GET /my1.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:51 +0200] "GET /f35.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:51 +0200] "GET /alfa-rex.php7 HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:52 +0200] "GET /ee.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:52 +0200] "GET /ggfi.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:52 +0200] "GET /b1ack.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:52 +0200] "GET /bak.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:52 +0200] "GET /inputs.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:53 +0200] "GET /system_log.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:53 +0200] "GET /lol.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:53 +0200] "GET /geju.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:53 +0200] "GET /class-t.api.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:54 +0200] "GET /css.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:54 +0200] "GET /xx.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:54 +0200] "GET /0.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:54 +0200] "GET /x.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:55 +0200] "GET /wp-blog-header.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:55 +0200] "GET /randkeyword.PhP7 HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:55 +0200] "GET /ultra.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:55 +0200] "GET /up.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:56 +0200] "GET /y.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:56 +0200] "GET /13.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:56 +0200] "GET /aa.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:56 +0200] "GET /chosen.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:56 +0200] "GET /2.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:57 +0200] "GET /abc.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:57 +0200] "GET /about.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:57 +0200] "GET /0x.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:57 +0200] "GET /fff.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:58 +0200] "GET /ff1.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:58 +0200] "GET /wp-themes.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:58 +0200] "GET /content.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:58 +0200] "GET /r.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:58 +0200] "GET /w.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:59 +0200] "GET /edit.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:59 +0200] "GET /wp-blog.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:59 +0200] "GET /10.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:59 +0200] "GET /p.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:00 +0200] "GET /hplfuns.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:00 +0200] "GET /bless.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:00 +0200] "GET /php.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
91.108.5.147 - - [16/Apr/2026:02:25:00 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
23.101.8.77 - - [16/Apr/2026:02:25:00 +0200] "GET /chosen.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:00 +0200] "GET /ioxi-o.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:01 +0200] "GET /av.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:01 +0200] "GET /doc.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:01 +0200] "GET /elp.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:01 +0200] "GET /wp-user.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:02 +0200] "GET /root.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
95.216.2.94 - - [16/Apr/2026:02:25:02 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
23.101.8.77 - - [16/Apr/2026:02:25:02 +0200] "GET /alfa.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:02 +0200] "GET /autoload_classmap.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:02 +0200] "GET /file.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:02 +0200] "GET /new.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:03 +0200] "GET /ioxi-o.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:03 +0200] "GET /mm.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:03 +0200] "GET /oxshell.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:03 +0200] "GET /load.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:04 +0200] "GET /k.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:04 +0200] "GET /atomlib.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:04 +0200] "GET /buy.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:04 +0200] "GET /info.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:04 +0200] "GET /goods.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:05 +0200] "GET /setup-config.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:05 +0200] "GET /ss.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:05 +0200] "GET /xmlrpc.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:05 +0200] "GET /flower.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:05 +0200] "GET /al.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:06 +0200] "GET /vv.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:06 +0200] "GET /wp-signin.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:06 +0200] "GET /wsa.php HTTP/1.1" 403 4163 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
91.108.5.147 - - [16/Apr/2026:02:26:15 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:28:02 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:29:10 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
95.216.2.94 - - [16/Apr/2026:02:30:01 +0200] "GET /services/check/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
95.216.2.94 - - [16/Apr/2026:02:30:01 +0200] "GET /services/get_news/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:02:30:25 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:31:49 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:33:39 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
95.216.2.94 - - [16/Apr/2026:02:35:01 +0200] "GET /services/check/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:02:35:39 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:37:08 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:38:15 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"