91.108.5.147 - - [16/Apr/2026:00:00:53 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
74.7.230.45 - - [16/Apr/2026:00:01:32 +0200] "GET /robots.txt HTTP/1.1" 403 4087 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot"
91.108.5.147 - - [16/Apr/2026:00:02:44 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:04:26 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:00:05:02 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:00:06:00 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:07:38 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:09:29 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
95.216.2.94 - - [16/Apr/2026:00:10:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:00:10:58 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:12:40 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:14:01 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:00:15:01 +0200] "GET /services/get_news/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
95.216.2.94 - - [16/Apr/2026:00:15:01 +0200] "GET /services/check/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:00:15:40 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:17:03 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:18:51 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
95.216.2.94 - - [16/Apr/2026:00:20:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:00:20:30 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:21:49 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:22:55 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:24:09 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
95.216.2.94 - - [16/Apr/2026:00:25:01 +0200] "GET /services/check/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:00:25:55 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:27:17 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:28:41 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
95.216.2.94 - - [16/Apr/2026:00:30:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
95.216.2.94 - - [16/Apr/2026:00:30:01 +0200] "GET /services/get_news/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:00:30:25 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:31:47 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:32:54 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:34:31 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:00:35:01 +0200] "GET /services/check/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:00:35:31 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:36:38 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:38:31 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
45.84.107.222 - - [16/Apr/2026:00:39:15 +0200] "GET /.DS_Store HTTP/1.1" 403 9131 "-" "Go-http-client/1.1"
185.220.101.9 - - [16/Apr/2026:00:39:18 +0200] "GET /.git/config HTTP/1.1" 403 9131 "-" "Go-http-client/1.1"
192.42.116.99 - - [16/Apr/2026:00:39:21 +0200] "GET /.git/config HTTP/1.1" 403 4087 "-" "Go-http-client/1.1"
185.220.101.22 - - [16/Apr/2026:00:39:33 +0200] "GET /.DS_Store HTTP/1.1" 403 9131 "-" "Go-http-client/1.1"
95.216.2.94 - - [16/Apr/2026:00:40:01 +0200] "GET /services/check/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:00:40:12 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
192.210.150.196 - - [16/Apr/2026:00:40:13 +0200] "GET / HTTP/1.1" 403 9150 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:40.0) Gecko/20100101 Firefox/40.0"
192.210.150.196 - - [16/Apr/2026:00:40:15 +0200] "GET / HTTP/1.1" 403 4106 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:40.0) Gecko/20100101 Firefox/40.0"
91.108.5.147 - - [16/Apr/2026:00:41:14 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:42:27 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:44:17 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:00:45:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
95.216.2.94 - - [16/Apr/2026:00:45:01 +0200] "GET /services/get_news/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:00:45:23 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:47:03 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:48:16 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
34.195.16.23 - - [16/Apr/2026:00:49:51 +0200] "GET /robots.txt HTTP/1.1" 403 9199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)"
95.216.2.94 - - [16/Apr/2026:00:50:01 +0200] "GET /services/check/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:00:50:01 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:51:50 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:53:20 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:54:47 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:00:55:01 +0200] "GET /services/check/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:00:55:58 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:57:36 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:00:59:17 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
95.216.2.94 - - [16/Apr/2026:01:00:01 +0200] "GET /services/get_news/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
95.216.2.94 - - [16/Apr/2026:01:00:01 +0200] "GET /services/check/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:01:00:57 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
54.172.209.207 - - [16/Apr/2026:01:01:42 +0200] "GET /robots.txt HTTP/1.1" 403 9199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)"
91.108.5.147 - - [16/Apr/2026:01:02:21 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:03:26 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:04:47 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
95.216.2.94 - - [16/Apr/2026:01:05:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:01:05:58 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:07:09 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:08:15 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
40.113.4.217 - - [16/Apr/2026:01:09:59 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 4087 "-" "-"
40.113.4.217 - - [16/Apr/2026:01:09:59 +0200] "GET /1index.php HTTP/1.1" 403 4087 "-" "-"
40.113.4.217 - - [16/Apr/2026:01:09:59 +0200] "GET /cs.php HTTP/1.1" 403 4087 "-" "-"
40.113.4.217 - - [16/Apr/2026:01:09:59 +0200] "GET /k.php HTTP/1.1" 403 4087 "-" "-"
40.113.4.217 - - [16/Apr/2026:01:09:59 +0200] "GET /shell20211028.php HTTP/1.1" 403 4087 "-" "-"
40.113.4.217 - - [16/Apr/2026:01:09:59 +0200] "GET /shadow-bot.php HTTP/1.1" 403 4087 "-" "-"
95.216.2.94 - - [16/Apr/2026:01:10:01 +0200] "GET /services/check/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:01:10:03 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
104.210.140.131 - - [16/Apr/2026:01:10:48 +0200] "GET /robots.txt HTTP/1.1" 403 9178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
91.108.5.147 - - [16/Apr/2026:01:11:31 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:12:54 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:14:15 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
95.216.2.94 - - [16/Apr/2026:01:15:01 +0200] "GET /services/check/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
95.216.2.94 - - [16/Apr/2026:01:15:01 +0200] "GET /services/get_news/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:01:15:18 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:16:22 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
20.235.69.36 - - [16/Apr/2026:01:17:26 +0200] "GET /admin.php HTTP/1.1" 403 9187 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:27 +0200] "GET /inputs.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:27 +0200] "GET /file.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:27 +0200] "GET /goods.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:27 +0200] "GET /ms-edit.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:27 +0200] "GET /bgymj.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:27 +0200] "GET /wp-content/plugins/twenty/login.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:28 +0200] "GET /404.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:28 +0200] "GET /file3.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:28 +0200] "GET /wp-mail.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:28 +0200] "GET /about.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:28 +0200] "GET /wp.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:28 +0200] "GET /.dj/index.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:29 +0200] "GET /adminfuns.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:29 +0200] "GET /php8.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:29 +0200] "GET /classwithtostring.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:29 +0200] "GET /info.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:29 +0200] "GET /ioxi-o.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:29 +0200] "GET /011i.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:29 +0200] "GET /sid3.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:30 +0200] "GET /166.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:30 +0200] "GET /wp-mail.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:30 +0200] "GET /leaf.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:30 +0200] "GET /grsiuk.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:30 +0200] "GET /8.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:30 +0200] "GET /fs.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:31 +0200] "GET /ws38.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:31 +0200] "GET /a7.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:31 +0200] "GET /classsmtps.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:31 +0200] "GET /amax.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:31 +0200] "GET /CDX1.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:31 +0200] "GET /rip.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:31 +0200] "GET /1.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:32 +0200] "GET /chosen.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:32 +0200] "GET /css.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:32 +0200] "GET /php.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:32 +0200] "GET /wp-Blogs.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:32 +0200] "GET /wp-content/index.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:32 +0200] "GET /wp-content/plugins/beteng88/ws83.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:33 +0200] "GET /ws83.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:33 +0200] "GET /file61.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:33 +0200] "GET /sadcut1.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:33 +0200] "GET /y.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:33 +0200] "GET /akcc.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:33 +0200] "GET /wp-admin/user/12.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:34 +0200] "GET /index/function.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:34 +0200] "GET /term.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:34 +0200] "GET /666.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:34 +0200] "GET /7.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:34 +0200] "GET /wp-config-sample.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:34 +0200] "GET /log.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:34 +0200] "GET /a5.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:35 +0200] "GET /aa.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:35 +0200] "GET /bolt.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:35 +0200] "GET /x.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:35 +0200] "GET /jga.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:35 +0200] "GET /k.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:35 +0200] "GET /vx.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:36 +0200] "GET /ws77.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:36 +0200] "GET /2.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:36 +0200] "GET /abcd.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:36 +0200] "GET /wp-content/plugins/admin.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:36 +0200] "GET /asd.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:36 +0200] "GET /default.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:37 +0200] "GET /gettest.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:37 +0200] "GET /install.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:37 +0200] "GET /tfm.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:37 +0200] "GET /ws81.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:37 +0200] "GET /222.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:37 +0200] "GET /tmp.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:37 +0200] "GET /wp-admin/maint/index.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:38 +0200] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:38 +0200] "GET /a.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:38 +0200] "GET /a1.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:38 +0200] "GET /onclickfuns.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:38 +0200] "GET /w.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:38 +0200] "GET /wp-admin/maint/about.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:39 +0200] "GET /wp-content/plugins/index.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:39 +0200] "GET /wp-good.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:39 +0200] "GET /.info.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:39 +0200] "GET /config.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:39 +0200] "GET /item.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:39 +0200] "GET /m.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.235.69.36 - - [16/Apr/2026:01:17:40 +0200] "GET /rh.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
91.108.5.147 - - [16/Apr/2026:01:17:57 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
170.106.180.153 - - [16/Apr/2026:01:18:00 +0200] "GET / HTTP/1.1" 403 4106 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
91.108.5.147 - - [16/Apr/2026:01:19:32 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
95.216.2.94 - - [16/Apr/2026:01:20:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:01:20:52 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:22:52 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:24:33 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:01:25:01 +0200] "GET /services/check/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:01:25:36 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:26:56 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:28:19 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:29:33 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
95.216.2.94 - - [16/Apr/2026:01:30:01 +0200] "GET /services/check/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
95.216.2.94 - - [16/Apr/2026:01:30:01 +0200] "GET /services/get_news/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:01:30:57 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:31:59 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:33:19 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:34:46 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
95.216.2.94 - - [16/Apr/2026:01:35:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:01:36:28 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
185.101.254.238 - - [16/Apr/2026:01:37:12 +0200] "GET / HTTP/1.1" 403 4106 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
91.108.5.147 - - [16/Apr/2026:01:37:44 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:39:37 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:01:40:01 +0200] "GET /services/check/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:01:41:36 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:43:34 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
95.216.2.94 - - [16/Apr/2026:01:45:01 +0200] "GET /services/check/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
95.216.2.94 - - [16/Apr/2026:01:45:01 +0200] "GET /services/get_news/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:01:45:29 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:47:10 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:49:06 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:01:50:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:01:50:15 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:51:39 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:53:03 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:01:55:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:01:55:02 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:56:55 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:01:58:51 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:02:00:02 +0200] "GET /services/get_news/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
95.216.2.94 - - [16/Apr/2026:02:00:02 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:02:00:32 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:02:20 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:04:15 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
95.216.2.94 - - [16/Apr/2026:02:05:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:02:05:34 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:07:19 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
204.12.208.18 - - [16/Apr/2026:02:07:37 +0200] "GET /wp-includes/ad068115/edit.php HTTP/1.1" 403 4143 "http://povoleni.ru/wp-includes/ad068115/edit.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:6.0.2) Gecko/20100101 Firefox/6.0.2"
204.12.208.18 - - [16/Apr/2026:02:07:38 +0200] "GET /wp-includes/ad068115/edit.php HTTP/1.1" 403 4087 "http://povoleni.ru/wp-includes/ad068115/edit.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
204.12.208.18 - - [16/Apr/2026:02:07:39 +0200] "GET /wp-includes/ad068115/edit.php HTTP/1.1" 403 4087 "http://povoleni.ru/wp-includes/ad068115/edit.php" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; ja-jp) AppleWebKit/523.12 (KHTML, like Gecko) Version/3.0.4 Safari/523.12"
91.108.5.147 - - [16/Apr/2026:02:09:18 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
95.216.2.94 - - [16/Apr/2026:02:10:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:02:10:50 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:12:32 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:13:36 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
95.216.2.94 - - [16/Apr/2026:02:15:01 +0200] "GET /services/check/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
95.216.2.94 - - [16/Apr/2026:02:15:01 +0200] "GET /services/get_news/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:02:15:12 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:16:33 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
20.193.52.210 - - [16/Apr/2026:02:17:39 +0200] "GET /admin.php HTTP/1.1" 403 9203 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:40 +0200] "GET /inputs.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:40 +0200] "GET /file.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:40 +0200] "GET /goods.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:41 +0200] "GET /ms-edit.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:41 +0200] "GET /bgymj.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:41 +0200] "GET /wp-content/plugins/twenty/login.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:41 +0200] "GET /404.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:42 +0200] "GET /file3.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:42 +0200] "GET /wp-mail.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:42 +0200] "GET /about.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:43 +0200] "GET /wp.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:43 +0200] "GET /.dj/index.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:43 +0200] "GET /adminfuns.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:43 +0200] "GET /php8.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:44 +0200] "GET /classwithtostring.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:44 +0200] "GET /info.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:44 +0200] "GET /ioxi-o.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:45 +0200] "GET /011i.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:45 +0200] "GET /sid3.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:45 +0200] "GET /166.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:45 +0200] "GET /wp-mail.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:46 +0200] "GET /leaf.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:46 +0200] "GET /grsiuk.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:46 +0200] "GET /8.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:47 +0200] "GET /fs.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:47 +0200] "GET /ws38.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:47 +0200] "GET /a7.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:48 +0200] "GET /classsmtps.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:48 +0200] "GET /amax.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:48 +0200] "GET /CDX1.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:48 +0200] "GET /rip.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:49 +0200] "GET /1.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:49 +0200] "GET /chosen.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:49 +0200] "GET /css.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:50 +0200] "GET /php.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:50 +0200] "GET /wp-Blogs.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:50 +0200] "GET /wp-content/index.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:50 +0200] "GET /wp-content/plugins/beteng88/ws83.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:51 +0200] "GET /ws83.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:51 +0200] "GET /file61.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:51 +0200] "GET /sadcut1.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:52 +0200] "GET /y.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:52 +0200] "GET /akcc.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:52 +0200] "GET /wp-admin/user/12.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:52 +0200] "GET /index/function.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:53 +0200] "GET /term.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:53 +0200] "GET /666.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:53 +0200] "GET /7.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:54 +0200] "GET /wp-config-sample.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:54 +0200] "GET /log.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:54 +0200] "GET /a5.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:55 +0200] "GET /aa.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:55 +0200] "GET /bolt.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:55 +0200] "GET /x.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:55 +0200] "GET /jga.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:56 +0200] "GET /k.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:56 +0200] "GET /vx.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:56 +0200] "GET /ws77.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:57 +0200] "GET /2.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:57 +0200] "GET /abcd.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:57 +0200] "GET /wp-content/plugins/admin.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:57 +0200] "GET /asd.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:58 +0200] "GET /default.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:58 +0200] "GET /gettest.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:58 +0200] "GET /install.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:59 +0200] "GET /tfm.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:59 +0200] "GET /ws81.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:17:59 +0200] "GET /222.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:00 +0200] "GET /tmp.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:00 +0200] "GET /wp-admin/maint/index.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:00 +0200] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:00 +0200] "GET /a.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:01 +0200] "GET /a1.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:01 +0200] "GET /onclickfuns.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:01 +0200] "GET /w.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:02 +0200] "GET /wp-admin/maint/about.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:02 +0200] "GET /wp-content/plugins/index.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:02 +0200] "GET /wp-good.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:02 +0200] "GET /.info.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:03 +0200] "GET /config.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:03 +0200] "GET /item.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:03 +0200] "GET /m.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.193.52.210 - - [16/Apr/2026:02:18:04 +0200] "GET /rh.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
91.108.5.147 - - [16/Apr/2026:02:18:25 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:19:46 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:02:20:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:02:21:30 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:22:35 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:23:47 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
23.101.8.77 - - [16/Apr/2026:02:24:46 +0200] "GET /100.php HTTP/1.1" 403 9203 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:46 +0200] "GET /7.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:46 +0200] "GET /php8.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:47 +0200] "GET /shell.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:47 +0200] "GET /adminfuns.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:47 +0200] "GET /wp.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:47 +0200] "GET /classwithtostring.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:47 +0200] "GET /abcd.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:48 +0200] "GET /as.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:48 +0200] "GET /Exception-class.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:48 +0200] "GET /1.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:48 +0200] "GET /222.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:49 +0200] "GET /item.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:49 +0200] "GET /past.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:49 +0200] "GET /t.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:49 +0200] "GET /license.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:49 +0200] "GET /b.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:50 +0200] "GET /network.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:50 +0200] "GET /V5.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:50 +0200] "GET /g.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:50 +0200] "GET /dialog.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:51 +0200] "GET /in.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:51 +0200] "GET /media.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:51 +0200] "GET /my1.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:51 +0200] "GET /f35.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:51 +0200] "GET /alfa-rex.php7 HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:52 +0200] "GET /ee.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:52 +0200] "GET /ggfi.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:52 +0200] "GET /b1ack.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:52 +0200] "GET /bak.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:52 +0200] "GET /inputs.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:53 +0200] "GET /system_log.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:53 +0200] "GET /lol.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:53 +0200] "GET /geju.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:53 +0200] "GET /class-t.api.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:54 +0200] "GET /css.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:54 +0200] "GET /xx.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:54 +0200] "GET /0.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:54 +0200] "GET /x.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:55 +0200] "GET /wp-blog-header.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:55 +0200] "GET /randkeyword.PhP7 HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:55 +0200] "GET /ultra.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:55 +0200] "GET /up.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:56 +0200] "GET /y.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:56 +0200] "GET /13.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:56 +0200] "GET /aa.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:56 +0200] "GET /chosen.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:56 +0200] "GET /2.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:57 +0200] "GET /abc.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:57 +0200] "GET /about.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:57 +0200] "GET /0x.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:57 +0200] "GET /fff.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:58 +0200] "GET /ff1.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:58 +0200] "GET /wp-themes.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:58 +0200] "GET /content.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:58 +0200] "GET /r.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:58 +0200] "GET /w.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:59 +0200] "GET /edit.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:59 +0200] "GET /wp-blog.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:59 +0200] "GET /10.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:24:59 +0200] "GET /p.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:00 +0200] "GET /hplfuns.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:00 +0200] "GET /bless.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:00 +0200] "GET /php.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
91.108.5.147 - - [16/Apr/2026:02:25:00 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
23.101.8.77 - - [16/Apr/2026:02:25:00 +0200] "GET /chosen.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:00 +0200] "GET /ioxi-o.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:01 +0200] "GET /av.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:01 +0200] "GET /doc.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:01 +0200] "GET /elp.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:01 +0200] "GET /wp-user.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:02 +0200] "GET /root.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
95.216.2.94 - - [16/Apr/2026:02:25:02 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
23.101.8.77 - - [16/Apr/2026:02:25:02 +0200] "GET /alfa.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:02 +0200] "GET /autoload_classmap.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:02 +0200] "GET /file.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:02 +0200] "GET /new.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:03 +0200] "GET /ioxi-o.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:03 +0200] "GET /mm.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:03 +0200] "GET /oxshell.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:03 +0200] "GET /load.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:04 +0200] "GET /k.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:04 +0200] "GET /atomlib.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:04 +0200] "GET /buy.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:04 +0200] "GET /info.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:04 +0200] "GET /goods.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:05 +0200] "GET /setup-config.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:05 +0200] "GET /ss.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:05 +0200] "GET /xmlrpc.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:05 +0200] "GET /flower.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:05 +0200] "GET /al.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:06 +0200] "GET /vv.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:06 +0200] "GET /wp-signin.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.8.77 - - [16/Apr/2026:02:25:06 +0200] "GET /wsa.php HTTP/1.1" 403 4163 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
91.108.5.147 - - [16/Apr/2026:02:26:15 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:28:02 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:29:10 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
95.216.2.94 - - [16/Apr/2026:02:30:01 +0200] "GET /services/check/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
95.216.2.94 - - [16/Apr/2026:02:30:01 +0200] "GET /services/get_news/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:02:30:25 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:31:49 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:33:39 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
95.216.2.94 - - [16/Apr/2026:02:35:01 +0200] "GET /services/check/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:02:35:39 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:37:08 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:38:15 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:39:32 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:02:40:01 +0200] "GET /services/check/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:02:40:55 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:42:48 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:44:17 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:02:45:01 +0200] "GET /services/check/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
95.216.2.94 - - [16/Apr/2026:02:45:01 +0200] "GET /services/get_news/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:02:46:12 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:48:12 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:49:52 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
95.216.2.94 - - [16/Apr/2026:02:50:01 +0200] "GET /services/check/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:02:51:34 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
49.235.136.28 - - [16/Apr/2026:02:52:48 +0200] "GET / HTTP/1.1" 403 4106 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
91.108.5.147 - - [16/Apr/2026:02:52:59 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:54:55 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:02:55:01 +0200] "GET /services/check/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:02:56:51 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:02:57:51 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
20.200.222.0 - - [16/Apr/2026:02:58:31 +0200] "GET /elp.php HTTP/1.1" 403 9187 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:31 +0200] "GET /ftde.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:31 +0200] "GET /wp-temp.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:32 +0200] "GET /admin/function.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:32 +0200] "GET /atomlib.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:32 +0200] "GET /themes.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:33 +0200] "GET /wp-blog.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:33 +0200] "GET /wp-the.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:33 +0200] "GET /CDX2.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:34 +0200] "GET /profile.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:34 +0200] "GET /wp-content/themes/admin.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:34 +0200] "GET /ws80.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:35 +0200] "GET /403.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:35 +0200] "GET /a4.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:35 +0200] "GET /app.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:36 +0200] "GET /buy.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:36 +0200] "GET /core.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:36 +0200] "GET /lock360.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:37 +0200] "GET /wp-block.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:37 +0200] "GET /wp-content/admin.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:37 +0200] "GET /wp-includes/images/wp-login.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:38 +0200] "GET /hplfuns.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:38 +0200] "GET /lock.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:38 +0200] "GET /radio.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:39 +0200] "GET /wp-content/themes/about.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:39 +0200] "GET /wp-content/upgrade/index.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:39 +0200] "GET /wp-includes/fonts.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:40 +0200] "GET /ws.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:40 +0200] "GET /ws49.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:40 +0200] "GET /xmlrpc.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:41 +0200] "GET /xozx.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:41 +0200] "GET /xwx1.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:41 +0200] "GET /Cap.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:42 +0200] "GET /ahax.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:42 +0200] "GET /byrgo.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:42 +0200] "GET /num.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:43 +0200] "GET /wp-content/themes/index.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:43 +0200] "GET /12.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:43 +0200] "GET /an.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:44 +0200] "GET /archive.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:44 +0200] "GET /as.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:44 +0200] "GET /db.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:44 +0200] "GET /error.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:45 +0200] "GET /ortasekerli1.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:45 +0200] "GET /wp-blog-header.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:45 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:46 +0200] "GET /wp-includes/class-wp-http-client.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:46 +0200] "GET /wp-includes/configuration.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:46 +0200] "GET /0x.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:47 +0200] "GET /aaa.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:47 +0200] "GET /byp.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:47 +0200] "GET /dropdown.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:48 +0200] "GET /mini.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:48 +0200] "GET /new.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:48 +0200] "GET /option.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:49 +0200] "GET /s.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:49 +0200] "GET /size.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:49 +0200] "GET /system_log.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:50 +0200] "GET /tool.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:50 +0200] "GET /wp-admin.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:50 +0200] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:51 +0200] "GET /about/function.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:51 +0200] "GET /albin.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:51 +0200] "GET /alfa.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:52 +0200] "GET /autoload_classmap.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:52 +0200] "GET /av.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:52 +0200] "GET /dragonshell.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:53 +0200] "GET /f35.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:53 +0200] "GET /gg.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:53 +0200] "GET /gifclass.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:54 +0200] "GET /sql.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:54 +0200] "GET /up.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:54 +0200] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:55 +0200] "GET /wp-admin/js/index.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.200.222.0 - - [16/Apr/2026:02:58:55 +0200] "GET /wp-p2r3q9c8k4.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
91.108.5.147 - - [16/Apr/2026:02:59:23 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
95.216.2.94 - - [16/Apr/2026:03:00:01 +0200] "GET /services/get_news/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
95.216.2.94 - - [16/Apr/2026:03:00:01 +0200] "GET /services/check/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:03:01:06 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
91.108.5.147 - - [16/Apr/2026:03:02:40 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:03:04:21 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:03:05:01 +0200] "GET /services/check/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:03:05:30 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:03:07:05 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:03:08:50 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:03:09:51 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
95.216.2.94 - - [16/Apr/2026:03:10:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:03:11:30 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
91.108.5.147 - - [16/Apr/2026:03:12:32 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:03:14:09 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:03:15:01 +0200] "GET /services/check/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
95.216.2.94 - - [16/Apr/2026:03:15:01 +0200] "GET /services/get_news/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:03:15:49 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:03:17:05 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
91.108.5.147 - - [16/Apr/2026:03:18:05 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:03:19:18 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:03:20:01 +0200] "GET /services/check/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:03:20:51 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:03:22:06 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:03:23:39 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:03:25:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:03:25:12 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:03:27:11 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:03:28:36 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
95.216.2.94 - - [16/Apr/2026:03:30:01 +0200] "GET /services/get_news/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
95.216.2.94 - - [16/Apr/2026:03:30:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:03:30:29 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:03:32:17 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:03:33:17 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:03:34:22 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
95.216.2.94 - - [16/Apr/2026:03:35:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:03:35:35 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:03:36:55 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
91.108.5.147 - - [16/Apr/2026:03:37:57 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:03:39:50 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:03:40:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
43.135.140.225 - - [16/Apr/2026:03:41:47 +0200] "GET / HTTP/1.1" 403 4106 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
91.108.5.147 - - [16/Apr/2026:03:41:50 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:03:43:39 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
95.216.2.94 - - [16/Apr/2026:03:45:01 +0200] "GET /services/get_news/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
95.216.2.94 - - [16/Apr/2026:03:45:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:03:45:38 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:03:46:52 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
91.108.5.147 - - [16/Apr/2026:03:48:34 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:03:49:43 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:03:50:01 +0200] "GET /services/check/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:03:51:35 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
91.108.5.147 - - [16/Apr/2026:03:53:13 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:03:55:01 +0200] "GET /services/check/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:03:55:12 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:03:56:55 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
3.229.248.49 - - [16/Apr/2026:03:57:52 +0200] "GET / HTTP/1.1" 403 9234 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 14_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.4 Mobile/15E148 Safari/604.1"
91.108.5.147 - - [16/Apr/2026:03:58:16 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:03:59:45 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
95.216.2.94 - - [16/Apr/2026:04:00:01 +0200] "GET /services/get_news/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
95.216.2.94 - - [16/Apr/2026:04:00:01 +0200] "GET /services/check/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:04:00:59 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
45.88.138.44 - - [16/Apr/2026:04:01:12 +0200] "GET /actuator/health HTTP/1.1" 403 9178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
91.108.5.147 - - [16/Apr/2026:04:02:54 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
91.108.5.147 - - [16/Apr/2026:04:04:27 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
95.216.2.94 - - [16/Apr/2026:04:05:01 +0200] "GET /services/check/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:04:05:50 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
91.108.5.147 - - [16/Apr/2026:04:07:03 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:04:08:44 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
95.216.2.94 - - [16/Apr/2026:04:10:01 +0200] "GET /services/check/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:04:10:37 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:04:11:57 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:04:13:08 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:04:14:45 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
95.216.2.94 - - [16/Apr/2026:04:15:01 +0200] "GET /services/get_news/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
95.216.2.94 - - [16/Apr/2026:04:15:01 +0200] "GET /services/check/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:04:16:36 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:04:18:18 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
95.216.2.94 - - [16/Apr/2026:04:20:01 +0200] "GET /services/check/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:04:20:05 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:04:21:15 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:04:22:52 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:04:24:20 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:04:25:01 +0200] "GET /services/check/ HTTP/1.1" 403 9204 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:04:25:36 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9187 "-" "-"
91.108.5.147 - - [16/Apr/2026:04:27:34 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"
23.101.4.52 - - [16/Apr/2026:04:27:43 +0200] "GET /buy.php HTTP/1.1" 403 9187 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:44 +0200] "GET /core.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:44 +0200] "GET /lock360.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:44 +0200] "GET /wp-block.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:44 +0200] "GET /wp-content/admin.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:44 +0200] "GET /elp.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:45 +0200] "GET /ftde.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:45 +0200] "GET /test1.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:45 +0200] "GET /wp-temp.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:45 +0200] "GET /admin/function.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:46 +0200] "GET /atomlib.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:46 +0200] "GET /themes.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:46 +0200] "GET /wp-blog.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:46 +0200] "GET /wp-the.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:46 +0200] "GET /CDX2.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:47 +0200] "GET /profile.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:47 +0200] "GET /wp-content/themes/admin.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:47 +0200] "GET /ws80.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:47 +0200] "GET /403.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:47 +0200] "GET /a4.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:48 +0200] "GET /app.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:48 +0200] "GET /z.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:48 +0200] "GET /hplfuns.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:48 +0200] "GET /lock.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:49 +0200] "GET /radio.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:49 +0200] "GET /wp-content/themes/about.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:49 +0200] "GET /wp-content/upgrade/1.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:49 +0200] "GET /wp-includes/fonts/new.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:49 +0200] "GET /ws.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:50 +0200] "GET /ws49.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:50 +0200] "GET /xmlrpc.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:50 +0200] "GET /xozx.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:50 +0200] "GET /xwx1.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:51 +0200] "GET /Cap.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:51 +0200] "GET /ahax.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:51 +0200] "GET /byrgo.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:51 +0200] "GET /css/index.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:51 +0200] "GET /jp.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:52 +0200] "GET /num.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:52 +0200] "GET /12.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:52 +0200] "GET /an.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:52 +0200] "GET /archive.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:53 +0200] "GET /as.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:53 +0200] "GET /db.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:53 +0200] "GET /error.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:53 +0200] "GET /ortasekerli1.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:53 +0200] "GET /wp-blog-header.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:54 +0200] "GET /wp-includes/configuration.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:54 +0200] "GET /0x.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:54 +0200] "GET /aaa.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:54 +0200] "GET /byp.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:54 +0200] "GET /dropdown.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:55 +0200] "GET /mini.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:55 +0200] "GET /new.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:55 +0200] "GET /option.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:55 +0200] "GET /s.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:56 +0200] "GET /size.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:56 +0200] "GET /system_log.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:56 +0200] "GET /tool.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:56 +0200] "GET /wp-admin.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:56 +0200] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:57 +0200] "GET /about/function.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:57 +0200] "GET /albin.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:57 +0200] "GET /alfa.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:57 +0200] "GET /autoload_classmap.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:57 +0200] "GET /av.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:58 +0200] "GET /dragonshell.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:58 +0200] "GET /f35.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:58 +0200] "GET /gg.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:58 +0200] "GET /gifclass.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:59 +0200] "GET /sql.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:59 +0200] "GET /up.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:59 +0200] "GET /wp-admin/css/colors/blue.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:59 +0200] "GET /wp-admin/js/index.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
23.101.4.52 - - [16/Apr/2026:04:27:59 +0200] "GET /wp-p2r3q9c8k4.php HTTP/1.1" 403 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
91.108.5.147 - - [16/Apr/2026:04:29:08 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
95.216.2.94 - - [16/Apr/2026:04:30:01 +0200] "GET /services/get_news/ HTTP/1.1" 403 9236 "-" "Wget/1.20.1 (linux-gnu)"
95.216.2.94 - - [16/Apr/2026:04:30:01 +0200] "GET /services/check/ HTTP/1.1" 403 9220 "-" "Wget/1.20.1 (linux-gnu)"
91.108.5.147 - - [16/Apr/2026:04:30:47 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9203 "-" "-"
91.108.5.147 - - [16/Apr/2026:04:32:02 +0200] "POST /services/telegrambot/ HTTP/1.1" 403 9219 "-" "-"