Linux cpanel.rrshost.in 5.15.0-25-generic #25-Ubuntu SMP Wed Mar 30 15:54:22 UTC 2022 x86_64
Apache
: 109.123.238.221 | : 172.70.100.174
128 Domain
8.2.28
aev999
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
HASH IDENTIFIER
README
+ Create Folder
+ Create File
/
var /
log /
apache2 /
domlogs /
aev999 /
[ HOME SHELL ]
Name
Size
Permission
Action
aev999.fun
44.31
KB
-rw-r-----
aev999.fun-ssl_log
2.95
KB
-rw-r-----
dagapc.com.aev999.fun
0
B
-rw-r-----
dagapc.com.aev999.fun-ssl_log
0
B
-rw-r-----
dagapc.net.aev999.fun
0
B
-rw-r-----
dagapc.net.aev999.fun-ssl_log
0
B
-rw-r-----
sv169.agency.aev999.fun
0
B
-rw-r-----
sv169.agency.aev999.fun-ssl_lo...
0
B
-rw-r-----
sv169.bond.aev999.fun
402.75
KB
-rw-r-----
sv169.bond.aev999.fun-ssl_log
18.96
KB
-rw-r-----
sv169.cam.aev999.fun
289.7
KB
-rw-r-----
sv169.cam.aev999.fun-ssl_log
1.58
MB
-rw-r-----
sv169.cfd.aev999.fun
119.36
KB
-rw-r-----
sv169.cfd.aev999.fun-ssl_log
8.36
KB
-rw-r-----
sv169.click.aev999.fun
458.32
KB
-rw-r-----
sv169.click.aev999.fun-ssl_log
220.32
KB
-rw-r-----
sv169.cyou.aev999.fun
84.58
KB
-rw-r-----
sv169.cyou.aev999.fun-ssl_log
15.95
KB
-rw-r-----
sv169.icu.aev999.fun
192.53
KB
-rw-r-----
sv169.icu.aev999.fun-ssl_log
30.63
KB
-rw-r-----
sv169.ink.aev999.fun
146.22
KB
-rw-r-----
sv169.ink.aev999.fun-ssl_log
97.22
KB
-rw-r-----
sv169.sbs.aev999.fun
106.6
KB
-rw-r-----
sv169.sbs.aev999.fun-ssl_log
56.08
KB
-rw-r-----
sv169.site.aev999.fun
38.14
KB
-rw-r-----
sv169.site.aev999.fun-ssl_log
671.58
KB
-rw-r-----
sv169.space.aev999.fun
858
B
-rw-r-----
sv169.space.aev999.fun-ssl_log
1
KB
-rw-r-----
sv169.store.aev999.fun
201.4
KB
-rw-r-----
sv169.store.aev999.fun-ssl_log
306.57
KB
-rw-r-----
v99.cam.aev999.fun
246.22
KB
-rw-r-----
v99.cam.aev999.fun-ssl_log
5.89
KB
-rw-r-----
v99win.cafe.aev999.fun
0
B
-rw-r-----
v99win.cafe.aev999.fun-ssl_log
0
B
-rw-r-----
v99win.plus.aev999.fun
2.44
KB
-rw-r-----
v99win.plus.aev999.fun-ssl_log
296.27
KB
-rw-r-----
v99win.today.aev999.fun
818.66
KB
-rw-r-----
v99win.today.aev999.fun-ssl_lo...
65.75
MB
-rw-r-----
verifyclick.info.aev999.fun
492.96
KB
-rw-r-----
verifyclick.info.aev999.fun-ss...
244.92
KB
-rw-r-----
zy1166.com.aev999.fun
0
B
-rw-r-----
zy1166.com.aev999.fun-ssl_log
0
B
-rw-r-----
Delete
Unzip
Zip
${this.title}
Close
Code Editor : verifyclick.info.aev999.fun-ssl_log
172.70.240.93 - - [07/Jul/2025:16:33:47 +0800] "POST /xmlrpc.php HTTP/1.1" 404 16 "https://verifyclick.info" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 104.23.175.244 - - [07/Jul/2025:16:42:03 +0800] "GET /.well-known/acme-challenge/0WV499H-LEF3L3368YP61GYXGHLXZFMF HTTP/1.1" 404 16 "-" "Cpanel-HTTP-Client/1.0" 162.158.162.90 - - [07/Jul/2025:16:42:06 +0800] "GET /.well-known/acme-challenge/9908J_ZZAC9HFTO5SSB3HYOHN2LHKATW HTTP/1.1" 404 16 "-" "Cpanel-HTTP-Client/1.0" 172.69.178.44 - - [07/Jul/2025:16:42:28 +0800] "POST /xmlrpc.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 141.101.99.72 - - [07/Jul/2025:16:45:02 +0800] "GET / HTTP/1.1" 200 1929 "-" "-" 172.71.241.73 - - [07/Jul/2025:16:45:03 +0800] "GET / HTTP/1.1" 200 1929 "-" "Mozilla/5.0 (Linux; Android 6.0; HTC One M9 Build/MRA129970) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2890.98 Mobile Safari/537.3" 141.101.98.8 - - [07/Jul/2025:16:45:04 +0800] "GET /@vite/env HTTP/1.1" 404 16 "-" "Go-http-client/1.1" 172.70.85.110 - - [07/Jul/2025:16:45:05 +0800] "GET /actuator/env HTTP/1.1" 404 16 "-" "Go-http-client/1.1" 172.68.229.64 - - [07/Jul/2025:16:45:05 +0800] "GET /server HTTP/1.1" 404 16 "-" "Go-http-client/1.1" 172.71.241.89 - - [07/Jul/2025:16:45:06 +0800] "GET /.vscode/sftp.json HTTP/1.1" 404 16 "-" "Go-http-client/1.1" 172.71.178.171 - - [07/Jul/2025:16:45:07 +0800] "GET /about HTTP/1.1" 404 16 "-" "Go-http-client/1.1" 141.101.99.112 - - [07/Jul/2025:16:45:07 +0800] "GET /debug/default/view?panel=config HTTP/1.1" 404 16 "-" "Go-http-client/1.1" 141.101.98.254 - - [07/Jul/2025:16:45:08 +0800] "GET /v2/_catalog HTTP/1.1" 404 16 "-" "Go-http-client/1.1" 172.70.163.5 - - [07/Jul/2025:16:45:09 +0800] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 404 16 "-" "Go-http-client/1.1" 172.70.90.128 - - [07/Jul/2025:16:45:10 +0800] "GET /server-status HTTP/1.1" 404 16 "-" "Go-http-client/1.1" 172.68.186.130 - - [07/Jul/2025:16:45:11 +0800] "GET /login.action HTTP/1.1" 404 16 "-" "Go-http-client/1.1" 172.68.186.163 - - [07/Jul/2025:16:45:11 +0800] "GET /_all_dbs HTTP/1.1" 404 16 "-" "Mozilla/5.0 (l9scan/2.0.030323e2231323e27363e2237313; +https://leakix.net)" 172.71.26.102 - - [07/Jul/2025:16:45:12 +0800] "GET /.DS_Store HTTP/1.1" 404 16 "-" "Go-http-client/1.1" 172.69.43.135 - - [07/Jul/2025:16:45:12 +0800] "GET /.env HTTP/1.1" 404 16 "-" "Go-http-client/1.1" 172.70.162.122 - - [07/Jul/2025:16:45:13 +0800] "GET /.git/config HTTP/1.1" 404 16 "-" "Go-http-client/1.1" 172.70.91.80 - - [07/Jul/2025:16:45:14 +0800] "GET /s/030323e2231323e27363e2237313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 404 16 "-" "Go-http-client/1.1" 172.71.178.40 - - [07/Jul/2025:16:45:14 +0800] "GET /config.json HTTP/1.1" 404 16 "-" "Go-http-client/1.1" 172.68.229.44 - - [07/Jul/2025:16:45:15 +0800] "GET /telescope/requests HTTP/1.1" 404 16 "-" "Go-http-client/1.1" 172.70.86.128 - - [07/Jul/2025:16:45:15 +0800] "GET /info.php HTTP/1.1" 404 16 "-" "Go-http-client/1.1" 172.71.241.50 - - [07/Jul/2025:16:45:16 +0800] "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 200 1929 "-" "Go-http-client/1.1" 162.158.88.142 - - [07/Jul/2025:16:51:39 +0800] "GET / HTTP/1.1" 200 1925 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 162.158.190.96 - - [07/Jul/2025:16:51:39 +0800] "GET /favicon.ico HTTP/1.1" 404 16 "https://verifyclick.info/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 108.162.241.215 - - [07/Jul/2025:16:51:50 +0800] "GET /gioi-thieu-v99win/ HTTP/1.1" 404 16 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 172.71.178.160 - - [07/Jul/2025:17:08:36 +0800] "POST /xmlrpc.php HTTP/1.1" 404 16 "https://verifyclick.info" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 108.162.212.75 - - [07/Jul/2025:17:10:23 +0800] "GET /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 16698 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 108.162.210.139 - - [07/Jul/2025:17:10:26 +0800] "GET /favicon.ico HTTP/1.1" 404 16 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.119.111 - - [07/Jul/2025:17:16:19 +0800] "GET / HTTP/1.1" 200 1925 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 172.70.49.88 - - [07/Jul/2025:17:16:35 +0800] "GET /favicon.ico HTTP/1.1" 404 16 "https://verifyclick.info/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 172.68.7.16 - - [07/Jul/2025:17:19:11 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 16713 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.16 - - [07/Jul/2025:17:19:16 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 15550 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.16 - - [07/Jul/2025:17:19:27 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 16143 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.17 - - [07/Jul/2025:17:19:34 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 16727 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.17 - - [07/Jul/2025:17:19:40 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 17336 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.70.38.7 - - [07/Jul/2025:17:28:07 +0800] "GET /robots.txt HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)" 172.70.174.238 - - [07/Jul/2025:17:28:08 +0800] "GET /ban-ca-an-xu-v99win/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)" 104.23.217.50 - - [07/Jul/2025:17:31:52 +0800] "GET /pl/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 10; SM-G981B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.162 Mobile Safari/537.36" 172.69.214.155 - - [07/Jul/2025:17:35:01 +0800] "GET /quyen-rieng-tu-v99win/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 172.71.124.124 - - [07/Jul/2025:17:37:39 +0800] "GET /wp-login.php HTTP/1.1" 200 - "-" "Mozilla/5.0" 172.71.124.124 - - [07/Jul/2025:17:38:48 +0800] "GET /wp-login.php HTTP/1.1" 200 - "-" "Mozilla/5.0" 172.71.126.46 - - [07/Jul/2025:17:39:39 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.126.46 - - [07/Jul/2025:17:39:41 +0800] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.126.46 - - [07/Jul/2025:17:39:42 +0800] "GET //xmlrpc.php?rsd HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.126.46 - - [07/Jul/2025:17:39:43 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.126.46 - - [07/Jul/2025:17:39:43 +0800] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.126.46 - - [07/Jul/2025:17:39:44 +0800] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.126.46 - - [07/Jul/2025:17:39:45 +0800] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.126.46 - - [07/Jul/2025:17:39:46 +0800] "GET //website/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.126.46 - - [07/Jul/2025:17:39:47 +0800] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.126.46 - - [07/Jul/2025:17:39:48 +0800] "GET //news/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.126.46 - - [07/Jul/2025:17:39:48 +0800] "GET //2018/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.126.46 - - [07/Jul/2025:17:39:49 +0800] "GET //2019/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.126.46 - - [07/Jul/2025:17:39:50 +0800] "GET //shop/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.126.46 - - [07/Jul/2025:17:39:50 +0800] "GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.126.46 - - [07/Jul/2025:17:39:51 +0800] "GET //test/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.126.46 - - [07/Jul/2025:17:39:52 +0800] "GET //media/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.126.46 - - [07/Jul/2025:17:39:52 +0800] "GET //wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.126.46 - - [07/Jul/2025:17:39:53 +0800] "GET //site/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.126.46 - - [07/Jul/2025:17:39:54 +0800] "GET //cms/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.126.46 - - [07/Jul/2025:17:39:55 +0800] "GET //sito/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.68.229.146 - - [07/Jul/2025:17:40:42 +0800] "GET /xmlrpc.php HTTP/1.1" 200 - "http://v99win.cafe/xmlrpc.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 172.70.174.65 - - [07/Jul/2025:17:43:21 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "https://verifyclick.info" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:128.0) Gecko/20100101 Firefox/128.0" 172.70.255.176 - - [07/Jul/2025:17:43:45 +0800] "GET /3401fgeaanz92mewttmb6 HTTP/1.1" 200 9634 "-" "Googlebot/2.1 (+http://www.googlebot.com/bot.html)" 108.162.210.139 - - [07/Jul/2025:17:43:52 +0800] "GET /favicon.ico HTTP/1.1" 200 124102 "https://verifyclick.info/3401fgeaanz92mewttmb6" "Googlebot/2.1 (+http://www.googlebot.com/bot.html)" 172.71.98.103 - - [07/Jul/2025:17:50:18 +0800] "GET /.git/config HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1700.76 Safari/537.36 OPR/19.0.1326.56" 172.68.12.118 - - [07/Jul/2025:17:50:57 +0800] "GET /3401fgeaanz92mewttmb6 HTTP/1.1" 200 9634 "-" "Googlebot/2.1 (+http://www.googlebot.com/bot.html)" 172.70.54.36 - - [07/Jul/2025:17:51:27 +0800] "GET /index.php HTTP/1.1" 200 - "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.2; .NET CLR 1.1.4322; .NET CLR 2.0.50727)" 172.68.7.202 - - [07/Jul/2025:17:56:53 +0800] "GET /index.php HTTP/1.1" 200 - "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.2; .NET CLR 1.1.4322; .NET CLR 2.0.50727)" 108.162.210.156 - - [07/Jul/2025:17:58:10 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 9245 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.109 - - [07/Jul/2025:17:59:51 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 9830 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.5 - - [07/Jul/2025:18:02:43 +0800] "GET /.well-known/dlu.php HTTP/1.1" 200 25090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.4 - - [07/Jul/2025:18:03:27 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 17317 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.4 - - [07/Jul/2025:18:04:38 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 8684 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.4 - - [07/Jul/2025:18:05:48 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 17317 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.5 - - [07/Jul/2025:18:07:49 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 9810 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.5 - - [07/Jul/2025:18:07:53 +0800] "GET /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 17315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.5 - - [07/Jul/2025:18:07:59 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 9810 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.4 - - [07/Jul/2025:18:09:54 +0800] "GET /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 17315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.4 - - [07/Jul/2025:18:10:05 +0800] "GET /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 17315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.4 - - [07/Jul/2025:18:10:17 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 18052 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.4 - - [07/Jul/2025:18:10:23 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 17491 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 108.162.246.67 - - [07/Jul/2025:18:10:36 +0800] "GET /google19e913c8413ffeab.html HTTP/1.1" 200 53 "-" "Mozilla/5.0 (compatible; Google-Site-Verification/1.0)" 172.71.23.20 - - [07/Jul/2025:18:10:36 +0800] "GET / HTTP/1.1" 200 117265 "-" "Mozilla/5.0 (compatible; Google-Site-Verification/1.0)" 172.71.31.166 - - [07/Jul/2025:18:10:36 +0800] "GET / HTTP/1.1" 200 117265 "-" "Mozilla/5.0 (compatible; Google-Site-Verification/1.0)" 172.68.23.227 - - [07/Jul/2025:18:10:36 +0800] "GET /google9435e01b90cd0444.html HTTP/1.1" 200 121719 "-" "Mozilla/5.0 (compatible; Google-Site-Verification/1.0)" 172.71.31.167 - - [07/Jul/2025:18:10:36 +0800] "GET / HTTP/1.1" 200 117265 "-" "Mozilla/5.0 (compatible; Google-Site-Verification/1.0)" 172.71.31.166 - - [07/Jul/2025:18:10:40 +0800] "GET /?cachebuster=2739796677 HTTP/1.1" 200 122912 "-" "Mozilla/5.0 (compatible; Google-Site-Verification/1.0)" 172.68.23.227 - - [07/Jul/2025:18:10:43 +0800] "GET /google19e913c8413ffeab.html HTTP/1.1" 200 53 "-" "Mozilla/5.0 (compatible; Google-Site-Verification/1.0)" 108.162.246.67 - - [07/Jul/2025:18:10:43 +0800] "GET /google9435e01b90cd0444.html HTTP/1.1" 200 121719 "-" "Mozilla/5.0 (compatible; Google-Site-Verification/1.0)" 172.68.7.4 - - [07/Jul/2025:18:10:44 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 16888 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 108.162.237.153 - - [07/Jul/2025:18:10:48 +0800] "GET /robots.txt HTTP/1.1" 200 123123 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.68.7.5 - - [07/Jul/2025:18:10:52 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 17457 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.5 - - [07/Jul/2025:18:10:58 +0800] "GET /pi.php HTTP/1.1" 200 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.4 - - [07/Jul/2025:18:11:01 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 16874 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.5 - - [07/Jul/2025:18:11:18 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 9810 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.5 - - [07/Jul/2025:18:11:29 +0800] "GET /.well-known/dlu.php HTTP/1.1" 200 25090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.5 - - [07/Jul/2025:18:11:33 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 8952 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.4 - - [07/Jul/2025:18:11:43 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 9539 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.4 - - [07/Jul/2025:18:11:58 +0800] "GET /.well-known/acme-challenge/info.php HTTP/1.1" 200 23015 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.4 - - [07/Jul/2025:18:12:15 +0800] "GET /.well-known/acme-challenge/info.php HTTP/1.1" 200 23012 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.4 - - [07/Jul/2025:18:12:20 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 16874 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.5 - - [07/Jul/2025:18:12:31 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 16314 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.5 - - [07/Jul/2025:18:12:36 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 7562 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 104.23.160.79 - - [07/Jul/2025:18:12:45 +0800] "GET / HTTP/1.1" 200 - "http://v99.cam" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 104.23.160.95 - - [07/Jul/2025:18:12:45 +0800] "GET / HTTP/1.1" 200 - "http://v99.cam" "Mozilla/5.0 (iPhone; CPU iPhone OS 14_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.4 Mobile/15E148 Safari/604.1" 172.71.22.85 - - [07/Jul/2025:18:12:44 +0800] "GET / HTTP/1.1" 200 117265 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.7151.103 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.68.7.5 - - [07/Jul/2025:18:12:44 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 7760 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.5 - - [07/Jul/2025:18:12:48 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 16885 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.5 - - [07/Jul/2025:18:12:59 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 7478 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 108.162.238.48 - - [07/Jul/2025:18:13:01 +0800] "POST /get-message-notify HTTP/1.1" 200 124711 "https://verifyclick.info/" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.7151.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.68.7.4 - - [07/Jul/2025:18:13:08 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 7631 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.5 - - [07/Jul/2025:18:13:10 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 400 - "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.4 - - [07/Jul/2025:18:13:10 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 7631 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.68.7.5 - - [07/Jul/2025:18:13:11 +0800] "POST /admin.php?action=p&api=p&path=p&token=shella HTTP/1.1" 200 7631 "https://verifyclick.info/admin.php?action=p&api=p&path=p&token=shella" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.71.8.82 - - [07/Jul/2025:18:43:13 +0800] "GET / HTTP/1.1" 200 - "http://www.v99.cam" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 141.101.76.37 - - [07/Jul/2025:18:44:21 +0800] "GET / HTTP/1.1" 200 - "http://www.v99.cam" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 141.101.76.36 - - [07/Jul/2025:18:44:22 +0800] "GET / HTTP/1.1" 200 - "http://www.v99win.cafe" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.71.30.222 - - [07/Jul/2025:18:45:05 +0800] "GET /no-hu-than-tai-v99win/ HTTP/1.1" 200 124445 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.7151.103 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.218.25 - - [07/Jul/2025:18:45:12 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:96.0) Gecko/20071914 Firefox/96.0" 172.71.154.247 - - [07/Jul/2025:18:52:06 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "https://verifyclick.info" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.138 Safari/537.36 Edg/112.0.1722.68" 162.158.108.4 - - [07/Jul/2025:18:56:01 +0800] "GET /wp-adriv/a1da00c253.php HTTP/1.1" 200 82 "https://verifyclick.info/wp-adriv/a1da00c253.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.43" 172.69.130.78 - - [07/Jul/2025:18:57:52 +0800] "GET /choi-co-trach-nhiem-v99win/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 162.158.42.176 - - [07/Jul/2025:19:04:19 +0800] "GET /robots.txt HTTP/1.1" 200 64 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 162.158.41.225 - - [07/Jul/2025:19:04:20 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 104.23.180.138 - - [07/Jul/2025:19:13:02 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux i686; rv:124.0) Gecko/20100101 Firefox/124.0" 104.23.180.138 - - [07/Jul/2025:19:13:02 +0800] "GET /.env HTTP/1.1" 200 - "-" "Mozilla/5.0" 104.23.180.138 - - [07/Jul/2025:19:13:03 +0800] "GET /.aws/credentials HTTP/1.1" 200 - "-" "Mozilla/5.0" 108.162.237.39 - - [07/Jul/2025:19:30:06 +0800] "GET /blocks-sitemap.xml HTTP/1.1" 200 149261 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.68.174.162 - - [07/Jul/2025:19:37:24 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 172.68.175.17 - - [07/Jul/2025:19:37:29 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 14_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.4 Mobile/15E148 Safari/604.1" 172.70.143.190 - - [07/Jul/2025:19:41:59 +0800] "GET /.well-known/acme-challenge/RCWAZ-7ABP0IJ45RW2P5J77RY0LG11N4 HTTP/1.1" 200 - "-" "Cpanel-HTTP-Client/1.0" 162.158.88.74 - - [07/Jul/2025:19:42:03 +0800] "GET /.well-known/acme-challenge/3XV8_8QB0E65FGPW5HJD8B1Z01JNLW-8 HTTP/1.1" 200 - "-" "Cpanel-HTTP-Client/1.0" 108.162.241.82 - - [07/Jul/2025:19:49:29 +0800] "GET /mien-tru-trach-nhiem-v99win/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 104.23.187.210 - - [07/Jul/2025:19:57:53 +0800] "GET /xmlrpc.php HTTP/1.1" 200 - "http://v99win.cafe/xmlrpc.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 162.158.94.211 - - [07/Jul/2025:20:03:14 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "https://verifyclick.info" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.96 Safari/537.36" 172.68.175.72 - - [07/Jul/2025:20:05:36 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36" 162.158.94.57 - - [07/Jul/2025:20:05:39 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36" 172.68.35.55 - - [07/Jul/2025:20:05:39 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 172.71.15.20 - - [07/Jul/2025:20:05:46 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 172.68.213.154 - - [07/Jul/2025:20:05:50 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:62.0) Gecko/20100101 Firefox/62.0" 172.71.215.88 - - [07/Jul/2025:20:05:53 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/29.0" 172.69.172.146 - - [07/Jul/2025:20:05:58 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7" 104.23.216.57 - - [07/Jul/2025:20:05:58 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (iPad; CPU OS 14_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/91.0.4472.80 Mobile/15E148 Safari/604.1" 104.23.195.63 - - [07/Jul/2025:20:06:03 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 104.23.170.174 - - [07/Jul/2025:20:09:20 +0800] "GET /xmlrpc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/75.0.0.0 Safari/537.36" 172.69.86.14 - - [07/Jul/2025:20:09:33 +0800] "GET /xmlrpc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/77.0.0.0 Safari/537.36" 172.71.255.121 - - [07/Jul/2025:20:12:51 +0800] "GET /ads.txt HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.178.41 - - [07/Jul/2025:20:12:54 +0800] "GET /ads.txt HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.123.125 - - [07/Jul/2025:20:13:50 +0800] "GET /xmlrpc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.70.127.182 - - [07/Jul/2025:20:14:51 +0800] "GET /robots.txt HTTP/1.1" 200 64 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 172.70.126.12 - - [07/Jul/2025:20:14:52 +0800] "GET /sitemap_index.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 104.23.187.72 - - [07/Jul/2025:20:15:48 +0800] "GET /xmlrpc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.69.214.155 - - [07/Jul/2025:20:37:28 +0800] "GET /huong-dan/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 172.70.115.167 - - [07/Jul/2025:20:39:19 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "https://verifyclick.info" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.5672.93 Safari/537.36" 172.69.7.120 - - [07/Jul/2025:20:48:43 +0800] "GET /ads.txt HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.127.143 - - [07/Jul/2025:20:48:47 +0800] "GET /ads.txt HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.23.160.123 - - [07/Jul/2025:20:52:48 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/109.0" 104.23.160.142 - - [07/Jul/2025:20:52:49 +0800] "GET /favicon.ico HTTP/1.1" 200 - "https://www.verifyclick.info/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/109.0" 172.68.174.117 - - [07/Jul/2025:20:54:49 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/109.0" 108.162.226.197 - - [07/Jul/2025:21:13:26 +0800] "GET / HTTP/1.1" 200 - "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Mobile Safari/537.36" 162.158.162.166 - - [07/Jul/2025:21:13:27 +0800] "GET /favicon.ico HTTP/1.1" 200 - "https://www.verifyclick.info/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Mobile Safari/537.36" 141.101.97.109 - - [07/Jul/2025:21:14:42 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "https://verifyclick.info" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.69.134.9 - - [07/Jul/2025:21:16:18 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 172.69.214.114 - - [07/Jul/2025:21:17:11 +0800] "GET /meo-cuoc/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 172.68.175.86 - - [07/Jul/2025:21:28:34 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36" 172.71.254.246 - - [07/Jul/2025:21:29:11 +0800] "GET /sitemap_index.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 172.71.154.204 - - [07/Jul/2025:21:35:28 +0800] "GET / HTTP/1.1" 200 - "http://v99.cam" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.69.134.218 - - [07/Jul/2025:21:38:17 +0800] "GET / HTTP/1.1" 200 - "http://www.v99win.cafe" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 141.101.99.119 - - [07/Jul/2025:21:43:43 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:43:44 +0800] "GET /wp-includes/pomo/mpvloi.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:43:45 +0800] "GET /wp-admin/images/edit-tags.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:43:45 +0800] "GET /wp-admin/includes/media.php.INFECTED.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:43:46 +0800] "GET /wp-includes/block-bindings.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:43:47 +0800] "GET /wp-admin/css/colors/ectoplasm/str_shuffcle.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:43:47 +0800] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:43:48 +0800] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:43:49 +0800] "GET /files/css_compare.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:43:49 +0800] "GET /wp-includes/class-json-ajax-session.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:43:50 +0800] "GET /wp-includes/0.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:43:51 +0800] "GET /wp-admin/css/acces.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:43:52 +0800] "GET /wp-includes/about.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:43:53 +0800] "GET /wp-admin/maint/go.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:43:53 +0800] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:43:54 +0800] "GET /wp-content/uploads/suit5y.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:43:55 +0800] "GET /uploads/update_with_pics.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:43:56 +0800] "GET /wp-admin/includes/admin-ajax.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:43:56 +0800] "GET /wp-admin/maint/wp-damin.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:43:57 +0800] "GET /wp-admin/includes/go.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:43:58 +0800] "GET /uploads/upload.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:43:59 +0800] "GET /wp-includes/class-wp-simplepie-sanitize-kses-stream.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:00 +0800] "GET /wp-includes/prayer_intentions.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:01 +0800] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:02 +0800] "GET /wp-admin/includes/class-wp-pagebuilders-BDsjLk.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:02 +0800] "GET /wp-admin/css/bgFbMo.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:03 +0800] "GET /wp-includes/cof.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:04 +0800] "GET /wp-admin/includes/class-wp-pagebuilders-5tgxav.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:05 +0800] "GET /wp-admin/css/OK.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:05 +0800] "GET /wp-admin/maint/doc.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:06 +0800] "GET /wp-admin/css/go.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:07 +0800] "GET /wp-admin/maint/cong.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:08 +0800] "GET /wp-admin/maint/yes.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:08 +0800] "GET /wp-content/upgrade/about.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:09 +0800] "GET /wp-admin/includes/class-wp-media-list-table-ezd.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:10 +0800] "GET /wp-includes/pomo/yellow.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:10 +0800] "GET /images/test.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:11 +0800] "GET /wp-admin/css/colors/dkSUq.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:12 +0800] "GET /wp-admin/images/wp-ksv1i.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:13 +0800] "GET /wp-admin/js/widgets/hYdXrMgTbH.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:14 +0800] "GET /wp-includes/Text/Diff/Renderer/last.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:15 +0800] "GET /wp-content/uploads/admin.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:15 +0800] "GET /wp-content/languages/ru_RU_lite.mo.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:16 +0800] "GET /wp-includes/widgets/hehe.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:17 +0800] "GET /wp-admin/css/colors/midnight/strcmp.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:18 +0800] "GET /wp-content/uploads/emvvuhwx.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:19 +0800] "GET /wp-includes/css/str_replace.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:19 +0800] "GET /wp-admin/includes/ace.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:20 +0800] "GET /wp-includes/wp-admin-css.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:21 +0800] "GET /wp-content/upgrade/120f9.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:21 +0800] "GET /wp-includes/Text/moon.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:22 +0800] "GET /wp-admin/css/colors/light/qwas.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:23 +0800] "GET /wp-includes/davoeqyv.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:24 +0800] "GET /wp-includes/js/codemirror/87.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:25 +0800] "GET /wp-includes/block-template-utils.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:25 +0800] "GET /wp-includes/fonts/browser.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:26 +0800] "GET /wp-admin/maint/smile.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:27 +0800] "GET /wp-includes/wp-2019.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:28 +0800] "GET /wp-includes/Text/Diff/Engine.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:28 +0800] "GET /images/up.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:29 +0800] "GET /wp-includes/link-template-git.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:30 +0800] "GET /wp-admin/images/searchl.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:31 +0800] "GET /wp-content/uploads/js.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:32 +0800] "GET /wp-includes/PHPMailer/brand.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:33 +0800] "GET /wp-includes/widgets/class-wp-widget-media-audio-module.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:34 +0800] "GET /wp-admin/includes/class-wp-pagebuilders-3bv4aS.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:35 +0800] "GET /wp-admin/includes/rfzhh.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:36 +0800] "GET /wp-includes/ID3/favicon.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:36 +0800] "GET /uploads/phUploader.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:37 +0800] "GET /wp-includes/fonts/themes.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:38 +0800] "GET /wp-admin/css/wp-damin.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:39 +0800] "GET /wp-content/up HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:39 +0800] "GET /text.php?fm=true HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:40 +0800] "GET /admin.php HTTP/1.1" 200 12 "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:40 +0800] "GET /ty.php?p= HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:41 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:41 +0800] "GET /file.php?fm=true HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:42 +0800] "GET /function.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:43 +0800] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:44 +0800] "GET /.well-known/wp-login.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:45 +0800] "GET /xleet.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:46 +0800] "GET /.well-known/pki-validation/xp.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:46 +0800] "GET /wp-content/languages/index.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:47 +0800] "GET /dropdown.php?p= HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:48 +0800] "GET /radio.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:49 +0800] "GET /moon.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:49 +0800] "GET /img/wp-login.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:50 +0800] "GET /wp-admin/maint/maint.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:51 +0800] "GET /mah.php?p= HTTP/1.1" 500 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:52 +0800] "GET /images/anjay.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:52 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/small.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:53 +0800] "GET /webadmin.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:54 +0800] "GET /core.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:55 +0800] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:56 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/astab.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:57 +0800] "GET /astab.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:57 +0800] "GET /makeasmtp.php?p= HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:58 +0800] "GET /abe.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:44:59 +0800] "GET /cgi-bin/index.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:00 +0800] "GET /packed.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:00 +0800] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:01 +0800] "GET /about/function.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:02 +0800] "GET /index/admin.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:04 +0800] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:04 +0800] "GET /wp-includes/fonts/index.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:05 +0800] "GET /wp-admin/images/about.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:07 +0800] "GET /simple.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:07 +0800] "GET /index/function.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:08 +0800] "GET /item.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:09 +0800] "GET /classwithtostring.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:09 +0800] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:10 +0800] "GET /wp-admin/includes/index.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:11 +0800] "GET /readme.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:12 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:12 +0800] "GET /wp-admin/images/index.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:13 +0800] "GET /filemanager.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:14 +0800] "GET /shell20211028.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:15 +0800] "GET /.well-known/index.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:15 +0800] "GET /info.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:16 +0800] "GET /file.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:17 +0800] "GET /wp-mail.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:18 +0800] "GET /defaults.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:19 +0800] "GET /about.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:20 +0800] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:21 +0800] "GET /wp-admin/404.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:21 +0800] "GET /db.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:22 +0800] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:23 +0800] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:23 +0800] "GET /cong.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:24 +0800] "GET /wp-admin/css/colors/index.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:25 +0800] "GET /install.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:25 +0800] "GET /wp-content/themes/ HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:26 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:27 +0800] "GET /.well-known/pki-validation/about.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:28 +0800] "GET /mah.php HTTP/1.1" 500 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:28 +0800] "GET /alfa.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:29 +0800] "GET /wp-admin/js/index.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:30 +0800] "GET /wp-admin/index.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:30 +0800] "GET /randkeyword.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:31 +0800] "GET /wp-content/about.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:32 +0800] "GET /buy.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:32 +0800] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:33 +0800] "GET /wp-content/file.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:34 +0800] "GET /autoload_classmap.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:34 +0800] "GET /wp-admin/user/index.php HTTP/1.1" 200 - "-" "-" 141.101.99.119 - - [07/Jul/2025:21:45:35 +0800] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 200 - "-" "-" 172.71.144.117 - - [07/Jul/2025:21:50:07 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "https://verifyclick.info" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 172.71.99.153 - - [07/Jul/2025:21:50:51 +0800] "GET / HTTP/1.1" 200 - "http://v99.cam" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 104.23.170.182 - - [07/Jul/2025:21:50:55 +0800] "GET / HTTP/1.1" 200 - "http://v99win.cafe" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 162.158.193.118 - - [07/Jul/2025:22:16:12 +0800] "GET /blocks-sitemap.xml HTTP/1.1" 200 149281 "https://v99win.cafe/blocks-sitemap.xml" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 172.68.175.72 - - [07/Jul/2025:22:40:41 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 108.162.245.144 - - [07/Jul/2025:22:42:05 +0800] "GET /xmlrpc.php HTTP/1.1" 200 - "http://v99win.cafe/xmlrpc.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 172.70.208.68 - - [07/Jul/2025:22:42:06 +0800] "GET /.well-known/acme-challenge/U78BLAS-J1LHOV8PNJ-ODKG523215CVN HTTP/1.1" 200 - "-" "Cpanel-HTTP-Client/1.0" 172.69.166.44 - - [07/Jul/2025:22:42:09 +0800] "GET /.well-known/acme-challenge/F5EDIY0RU6AVCHJ8PDNNE3G3VOY0XV4H HTTP/1.1" 200 - "-" "Cpanel-HTTP-Client/1.0" 172.68.211.73 - - [07/Jul/2025:22:59:31 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 172.71.211.49 - - [07/Jul/2025:22:59:33 +0800] "GET /?p=570 HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 108.162.227.57 - - [07/Jul/2025:23:02:24 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "https://verifyclick.info" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.5790.171 Safari/537.36 Edg/115.0.1901.203" 172.69.17.71 - - [07/Jul/2025:23:17:35 +0800] "GET /ads.txt HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.71.255.51 - - [07/Jul/2025:23:17:38 +0800] "GET /ads.txt HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.154.51 - - [07/Jul/2025:23:18:58 +0800] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 200 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 104.23.187.94 - - [07/Jul/2025:23:19:00 +0800] "POST /wp-plain.php HTTP/1.1" 200 - "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 162.158.154.51 - - [07/Jul/2025:23:19:01 +0800] "GET /fxyyrqbi.php?Fox=d3wL7 HTTP/1.1" 200 - "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.69.17.17 - - [07/Jul/2025:23:21:43 +0800] "GET / HTTP/1.1" 200 - "-" "-" 172.70.127.182 - - [07/Jul/2025:23:23:17 +0800] "GET /robots.txt HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.254.62 - - [07/Jul/2025:23:23:17 +0800] "GET /adminer.php HTTP/1.1" 200 4544 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.7151.103 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.158.79.23 - - [07/Jul/2025:23:24:31 +0800] "GET /adminer.php?file=default.css&version=4.8.1 HTTP/1.1" 200 6811 "https://verifyclick.info/adminer.php" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.7151.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.68.23.155 - - [07/Jul/2025:23:24:31 +0800] "GET /adminer.php?file=functions.js&version=4.8.1 HTTP/1.1" 200 27548 "https://verifyclick.info/adminer.php" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.7151.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 108.162.245.145 - - [07/Jul/2025:23:24:33 +0800] "POST /adminer.php?script=version HTTP/1.1" 200 - "https://verifyclick.info/adminer.php" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.7151.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.134.61 - - [07/Jul/2025:23:25:57 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:25:58 +0800] "GET /function/function.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:25:59 +0800] "GET /.well-known/log.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:00 +0800] "GET /mar.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:01 +0800] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:02 +0800] "GET /update/f35.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:02 +0800] "GET /system_log.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:03 +0800] "GET /lock360.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:04 +0800] "GET /atomlib.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:05 +0800] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:06 +0800] "GET /cgi-bin/cgi-bin/about.php7 HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:07 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:07 +0800] "GET /themes.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:08 +0800] "GET /goat1.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:09 +0800] "GET /bless.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:10 +0800] "GET /baxa1.phP8 HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:10 +0800] "GET /wp-configs.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:12 +0800] "GET /wp-content/upgrade/index.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:12 +0800] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:13 +0800] "GET /02.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:14 +0800] "GET /wp-includes/IXR/index.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:15 +0800] "GET /up.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:16 +0800] "GET /mail.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:16 +0800] "GET /jp.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:17 +0800] "GET /media.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:18 +0800] "GET /wp-content/themes/about.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:19 +0800] "GET /worksec.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:20 +0800] "GET /.well-known/pki-validation/dropdown.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:21 +0800] "GET /menu.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:22 +0800] "GET /log.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:23 +0800] "GET /class.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:24 +0800] "GET /.well-known/pki-validation/index.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:24 +0800] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:25 +0800] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:26 +0800] "GET /wp-conflg.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:27 +0800] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:28 +0800] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:28 +0800] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:29 +0800] "GET /wp-admin/images/file.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:30 +0800] "GET /wp-includes/pomo/about.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:31 +0800] "GET /wp-content/uploads/wp.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:32 +0800] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:33 +0800] "GET /wp-content/cong.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:33 +0800] "GET /wp-includes/js/about.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:34 +0800] "GET /cc.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:35 +0800] "GET /wp-includes/IXR/about.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:36 +0800] "GET /wp-mail.php/wp-includes/ID3/getid3s.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:37 +0800] "GET /wp-admin/function.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:37 +0800] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:38 +0800] "GET /wp-content/themes.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:39 +0800] "GET /wp-content/packed.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:40 +0800] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:40 +0800] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:41 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:42 +0800] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:43 +0800] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:44 +0800] "GET /wp-includes/block-supports/about.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:45 +0800] "GET /wp-admin/chosen.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:46 +0800] "GET /wp-content/themes/file.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:46 +0800] "GET /wp-includes/fonts/admin.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:47 +0800] "GET /wp-admin/classwithtostring.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:48 +0800] "GET /wp-content/upgrade/admin.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:49 +0800] "GET /wp-admin/log.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:49 +0800] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:50 +0800] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:51 +0800] "GET /wp-content/themes/twentytwentytwo/alfa-rex.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:52 +0800] "GET /wp-includes/style-engine/index.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:53 +0800] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:54 +0800] "GET /wp-content/languages/chosen.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:55 +0800] "GET /wp-admin/network/chosen.php HTTP/1.1" 200 - "-" "-" 172.70.134.61 - - [07/Jul/2025:23:26:55 +0800] "GET /wp-includes/html-api/index.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:00 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:02 +0800] "GET /function/function.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:03 +0800] "GET /.well-known/log.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:04 +0800] "GET /mar.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:04 +0800] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:05 +0800] "GET /update/f35.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:06 +0800] "GET /system_log.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:07 +0800] "GET /lock360.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:08 +0800] "GET /atomlib.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:09 +0800] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:10 +0800] "GET /cgi-bin/cgi-bin/about.php7 HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:12 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:13 +0800] "GET /themes.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:14 +0800] "GET /goat1.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:15 +0800] "GET /bless.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:16 +0800] "GET /baxa1.phP8 HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:17 +0800] "GET /wp-configs.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:17 +0800] "GET /wp-content/upgrade/index.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:18 +0800] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:19 +0800] "GET /02.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:20 +0800] "GET /wp-includes/IXR/index.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:21 +0800] "GET /up.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:22 +0800] "GET /mail.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:23 +0800] "GET /jp.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:24 +0800] "GET /media.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:25 +0800] "GET /wp-content/themes/about.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:26 +0800] "GET /worksec.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:26 +0800] "GET /.well-known/pki-validation/dropdown.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:27 +0800] "GET /menu.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:28 +0800] "GET /log.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:29 +0800] "GET /class.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:30 +0800] "GET /.well-known/pki-validation/index.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:31 +0800] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:32 +0800] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:33 +0800] "GET /wp-conflg.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:34 +0800] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:35 +0800] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:36 +0800] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:37 +0800] "GET /wp-admin/images/file.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:37 +0800] "GET /wp-includes/pomo/about.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:39 +0800] "GET /wp-content/uploads/wp.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:40 +0800] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:41 +0800] "GET /wp-content/cong.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:41 +0800] "GET /wp-includes/js/about.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:42 +0800] "GET /cc.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:43 +0800] "GET /wp-includes/IXR/about.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:44 +0800] "GET /wp-mail.php/wp-includes/ID3/getid3s.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:45 +0800] "GET /wp-admin/function.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:46 +0800] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:48 +0800] "GET /wp-content/packed.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:49 +0800] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:50 +0800] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:51 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:51 +0800] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:53 +0800] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:54 +0800] "GET /wp-includes/block-supports/about.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:54 +0800] "GET /wp-admin/chosen.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:55 +0800] "GET /wp-content/themes/file.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:56 +0800] "GET /wp-includes/fonts/admin.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:57 +0800] "GET /wp-admin/classwithtostring.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:58 +0800] "GET /wp-content/upgrade/admin.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:30:59 +0800] "GET /wp-admin/log.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:31:00 +0800] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:31:00 +0800] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:31:01 +0800] "GET /wp-content/themes/twentytwentytwo/alfa-rex.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:31:02 +0800] "GET /wp-includes/style-engine/index.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:31:03 +0800] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:31:03 +0800] "GET /wp-content/languages/chosen.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:31:04 +0800] "GET /wp-admin/network/chosen.php HTTP/1.1" 200 - "-" "-" 104.23.211.150 - - [07/Jul/2025:23:31:05 +0800] "GET /wp-includes/html-api/index.php HTTP/1.1" 200 - "-" "-" 172.70.80.196 - - [07/Jul/2025:23:38:53 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "https://verifyclick.info" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 172.70.100.163 - - [07/Jul/2025:23:44:20 +0800] "GET /cgi-bin/ HTTP/1.1" 403 125105 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.7151.103 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.158.182.69 - - [07/Jul/2025:23:49:41 +0800] "GET / HTTP/1.1" 200 - "https://verifyclick.info/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 141.101.69.39 - - [07/Jul/2025:23:56:23 +0800] "GET /robots.txt HTTP/1.1" 200 64 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.2; http://mj12bot.com/)" 172.71.131.33 - - [07/Jul/2025:23:56:24 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.2; http://mj12bot.com/)" 172.71.182.105 - - [08/Jul/2025:00:05:58 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 104.23.223.137 - - [08/Jul/2025:00:22:06 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 172.71.183.158 - - [08/Jul/2025:00:25:25 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 172.69.23.97 - - [08/Jul/2025:00:31:16 +0800] "GET / HTTP/1.1" 200 - "http://v99win.cafe" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 162.158.88.148 - - [08/Jul/2025:00:42:24 +0800] "GET / HTTP/1.1" 200 - "http://v99win.cafe/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.70.143.207 - - [08/Jul/2025:00:42:25 +0800] "GET /wordpress/ HTTP/1.1" 200 - "http://v99win.cafe/word%70ress/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:89.0) Gecko/20100101 Firefox/89.0" 172.68.174.163 - - [08/Jul/2025:00:48:13 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "https://verifyclick.info" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0.1) Gecko/20100101 Firefox/125.0.1" 162.158.167.46 - - [08/Jul/2025:00:49:44 +0800] "GET / HTTP/1.1" 200 - "http://www.v99.cam" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 104.23.223.136 - - [08/Jul/2025:00:50:26 +0800] "GET /xmlrpc.php HTTP/1.1" 200 - "http://v99win.cafe/xmlrpc.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 172.69.17.116 - - [08/Jul/2025:00:53:16 +0800] "GET /no-hu-v99win/ HTTP/1.1" 200 123507 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.7151.103 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.17.116 - - [08/Jul/2025:00:53:25 +0800] "POST /get-message-notify HTTP/1.1" 200 124711 "https://verifyclick.info/no-hu-v99win/" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.7151.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.166.73 - - [08/Jul/2025:00:57:51 +0800] "GET / HTTP/1.1" 200 - "http://www.v99win.cafe" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.71.126.196 - - [08/Jul/2025:01:03:43 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.2; http://mj12bot.com/)" 162.158.6.141 - - [08/Jul/2025:01:05:22 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; +info@netcraft.com)" 172.70.50.25 - - [08/Jul/2025:01:09:57 +0800] "GET /robots.txt HTTP/1.1" 200 64 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 172.69.130.106 - - [08/Jul/2025:01:09:57 +0800] "GET /sitemap_index.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 108.162.216.207 - - [08/Jul/2025:01:14:18 +0800] "GET /ban-ca-an-xu-v99win/ HTTP/1.1" 200 122962 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.7151.103 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 108.162.216.206 - - [08/Jul/2025:01:14:26 +0800] "POST /get-message-notify HTTP/1.1" 200 124711 "https://verifyclick.info/ban-ca-an-xu-v99win/" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.7151.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.111.36 - - [08/Jul/2025:01:29:29 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 104.23.209.166 - - [08/Jul/2025:01:30:22 +0800] "GET /quyen-rieng-tu-v99win/ HTTP/1.1" 200 125882 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 162.158.170.152 - - [08/Jul/2025:01:35:08 +0800] "GET /mah.php HTTP/1.1" 500 - "https://verifyclick.info/mah.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.43" 172.70.142.145 - - [08/Jul/2025:01:40:32 +0800] "GET /.well-known/acme-challenge/70PXZ2QTKGBSURTWWA7MFZYV78L4GY69 HTTP/1.1" 200 - "-" "Cpanel-HTTP-Client/1.0" 172.70.188.2 - - [08/Jul/2025:01:40:33 +0800] "GET /.well-known/acme-challenge/3A45KZLXW0M1_Y4OQH6H05-YHVQY89YH HTTP/1.1" 200 - "-" "Cpanel-HTTP-Client/1.0" 172.71.151.218 - - [08/Jul/2025:01:54:21 +0800] "GET /shopdetail/98957145635 HTTP/1.1" 200 123361 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.7151.103 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.232.122 - - [08/Jul/2025:01:57:25 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.232.122 - - [08/Jul/2025:01:57:25 +0800] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.232.122 - - [08/Jul/2025:01:57:26 +0800] "GET //xmlrpc.php?rsd HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.232.122 - - [08/Jul/2025:01:57:27 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.232.122 - - [08/Jul/2025:01:57:27 +0800] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.232.122 - - [08/Jul/2025:01:57:28 +0800] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.232.122 - - [08/Jul/2025:01:57:28 +0800] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.232.122 - - [08/Jul/2025:01:57:29 +0800] "GET //website/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.232.122 - - [08/Jul/2025:01:57:30 +0800] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.232.122 - - [08/Jul/2025:01:57:30 +0800] "GET //news/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.232.122 - - [08/Jul/2025:01:57:31 +0800] "GET //2018/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.232.122 - - [08/Jul/2025:01:57:32 +0800] "GET //2019/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.232.122 - - [08/Jul/2025:01:57:32 +0800] "GET //shop/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.232.122 - - [08/Jul/2025:01:57:33 +0800] "GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.232.122 - - [08/Jul/2025:01:57:33 +0800] "GET //test/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.232.122 - - [08/Jul/2025:01:57:34 +0800] "GET //media/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.232.122 - - [08/Jul/2025:01:57:35 +0800] "GET //wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.232.122 - - [08/Jul/2025:01:57:35 +0800] "GET //site/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.232.122 - - [08/Jul/2025:01:57:36 +0800] "GET //cms/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 172.71.232.122 - - [08/Jul/2025:01:57:37 +0800] "GET //sito/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.158.42.211 - - [08/Jul/2025:02:01:24 +0800] "GET /shopdetail/98957130138 HTTP/1.1" 200 124089 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.7151.103 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.158.49.99 - - [08/Jul/2025:02:10:43 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; +info@netcraft.com)" 104.23.168.42 - - [08/Jul/2025:02:11:47 +0800] "GET /ovumnnzv.php HTTP/1.1" 200 137 "-" "Mozilla/5.0(Windows NT 10.0; Win64; x64) AppleWebKit/537.36(KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 172.71.102.106 - - [08/Jul/2025:02:11:47 +0800] "GET /ovumnnzv.php?bak HTTP/1.1" 200 171 "-" "Mozilla/5.0(Windows NT 10.0; Win64; x64) AppleWebKit/537.36(KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 172.71.103.177 - - [08/Jul/2025:02:13:12 +0800] "GET /ovumnnzv.php HTTP/1.1" 200 137 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A" 172.70.47.182 - - [08/Jul/2025:02:13:12 +0800] "POST /ovumnnzv.php HTTP/1.1" 200 380 "http://v99win.cafe/ovumnnzv.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A" 141.101.76.97 - - [08/Jul/2025:02:13:13 +0800] "GET /yasnu.php HTTP/1.1" 200 29588 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.36" 104.23.217.38 - - [08/Jul/2025:02:13:58 +0800] "GET /xmlrpc.php HTTP/1.1" 200 - "http://v99win.cafe/xmlrpc.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 172.71.151.179 - - [08/Jul/2025:02:15:06 +0800] "GET /shopdetail/690528969 HTTP/1.1" 200 123870 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.7151.103 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.158.179.200 - - [08/Jul/2025:02:22:07 +0800] "GET /wp-content/uploads/2024/12/dien-so-diem-can-nap.webp HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 162.158.38.190 - - [08/Jul/2025:02:22:31 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 200 - "-" "-" 162.158.38.190 - - [08/Jul/2025:02:22:32 +0800] "GET /file.php HTTP/1.1" 200 - "-" "-" 162.158.38.190 - - [08/Jul/2025:02:22:33 +0800] "GET /moon.php HTTP/1.1" 200 - "-" "-" 162.158.38.190 - - [08/Jul/2025:02:22:33 +0800] "GET /admin.php HTTP/1.1" 500 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:34 +0800] "GET /radio.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:34 +0800] "GET /log.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:35 +0800] "GET /wp-trackback.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:36 +0800] "GET /wp-content/dropdown.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:36 +0800] "GET /wp-includes/index.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:37 +0800] "GET /simple.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:37 +0800] "GET /about.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:38 +0800] "GET /404.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:39 +0800] "GET /admin/function.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:39 +0800] "GET /wp-includes/assets/about.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:40 +0800] "GET /wp-includes/assets/index.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:40 +0800] "GET /info.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:41 +0800] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:42 +0800] "GET /config.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:42 +0800] "GET /wp-admin/js/index.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:43 +0800] "GET /fm.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:43 +0800] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:44 +0800] "GET /ty.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:45 +0800] "GET /wp-includes/assets/admin.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:45 +0800] "GET /wp-includes/fonts/admin.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:46 +0800] "GET /403.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:46 +0800] "GET /as.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:47 +0800] "GET /wp-includes/Text/network.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:48 +0800] "GET /index/function.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:48 +0800] "GET /wp-content/themes/include.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:49 +0800] "GET /alfa.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:50 +0800] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:50 +0800] "GET /css.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:51 +0800] "GET /wp-content/themes/plugin.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:52 +0800] "GET /wp-admin/includes/index.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:52 +0800] "GET /index.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:53 +0800] "GET /classwithtostring.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:54 +0800] "GET /autoload_classmap.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:54 +0800] "GET /item.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:55 +0800] "GET /ini.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:55 +0800] "GET /default.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:56 +0800] "GET /wp-admin/network/about.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:57 +0800] "GET /ok.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:57 +0800] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:58 +0800] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:59 +0800] "GET /inputs.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:22:59 +0800] "GET /1.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:00 +0800] "GET /infoo.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:00 +0800] "GET /cong.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:01 +0800] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:02 +0800] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:02 +0800] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:03 +0800] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:03 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:04 +0800] "GET /wp-includes/css/dist/preferences/index.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:05 +0800] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:05 +0800] "GET /wp-content/index.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:06 +0800] "GET /css/colors/blue/atomlib.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:07 +0800] "GET /wp-admin/maint/about.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:07 +0800] "GET /wp-includes/assets/themes.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:08 +0800] "GET /shell.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:08 +0800] "GET /install.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:09 +0800] "GET /wp-content/languages/chosen.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:10 +0800] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:10 +0800] "GET /wp-includes/html-api/wp-conflg.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:11 +0800] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:11 +0800] "GET /wp-content/packed.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:12 +0800] "GET /assets/images/doc.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:13 +0800] "GET /wp.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:13 +0800] "GET /wp-content/themes/file.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:14 +0800] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:15 +0800] "GET /m.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:15 +0800] "GET /wp-includes/blocks/wp-conflg.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:16 +0800] "GET /themes.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:16 +0800] "GET /manager.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:17 +0800] "GET /x.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:18 +0800] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:18 +0800] "GET /muse.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:19 +0800] "GET /alfa-rex2.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:19 +0800] "GET /wp-content/uploads/json.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:20 +0800] "GET /xmrlpc.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:21 +0800] "GET /post.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:21 +0800] "GET /cgi-bin/upfile.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:22 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:23 +0800] "GET /wp-admin/user/chosen.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:23 +0800] "GET /news.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:24 +0800] "GET /wp-admin/wp-conflg.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:24 +0800] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:25 +0800] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:26 +0800] "GET /plugins.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:26 +0800] "GET /chosen.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:27 +0800] "GET /wp-includes/ID3/index.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:28 +0800] "GET /images/admin.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:28 +0800] "GET /edit.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:29 +0800] "GET /wp-admin/user/admin.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:29 +0800] "GET /wp-admin/css/colors/index.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:30 +0800] "GET /makeasmtp.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:31 +0800] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:31 +0800] "GET /wp-admin/network/chosen.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:32 +0800] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:33 +0800] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:33 +0800] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:34 +0800] "GET /wp-admin/network/index.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:34 +0800] "GET /wp-admin/images/index.php HTTP/1.1" 200 - "-" "-" 162.158.38.191 - - [08/Jul/2025:02:23:35 +0800] "GET /wp-admin/yindu.php HTTP/1.1" 200 - "-" "-" 162.158.211.26 - - [08/Jul/2025:02:27:03 +0800] "GET / HTTP/1.1" 200 - "-" "python-requests/2.32.3" 172.69.224.101 - - [08/Jul/2025:02:44:18 +0800] "GET /wp-adriv/ HTTP/1.1" 200 1032 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.7151.103 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 108.162.246.81 - - [08/Jul/2025:02:48:30 +0800] "GET /?fbclid=IwZXh0bgNhZW0CMTEAAR4_r9r_vEm1rYflD1BbcOd8yyj3N4iXCqiy9TLhzNx2KUk3ev9eu_EMjUCs6Q_aem_Ka4BAVLfnIJnuONlnq_pNQ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.131 Safari/537.36" 108.162.246.178 - - [08/Jul/2025:02:48:33 +0800] "GET /favicon.ico HTTP/1.1" 200 - "https://verifyclick.info/?fbclid=IwZXh0bgNhZW0CMTEAAR4_r9r_vEm1rYflD1BbcOd8yyj3N4iXCqiy9TLhzNx2KUk3ev9eu_EMjUCs6Q_aem_Ka4BAVLfnIJnuONlnq_pNQ" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.131 Safari/537.36" 172.70.90.32 - - [08/Jul/2025:02:53:48 +0800] "GET /?fbclid=IwZXh0bgNhZW0CMTEAAR6i9WRAiCyMBA_UM4jUR1ZMHqmO5G9u2lpsXcuXwVtJFK-FFs_58glrYMSDxg_aem_xNFJojW_-WqFJ8o7Nw8LDg HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.131 Safari/537.36" 172.70.160.197 - - [08/Jul/2025:02:53:49 +0800] "GET /favicon.ico HTTP/1.1" 200 - "https://verifyclick.info/?fbclid=IwZXh0bgNhZW0CMTEAAR6i9WRAiCyMBA_UM4jUR1ZMHqmO5G9u2lpsXcuXwVtJFK-FFs_58glrYMSDxg_aem_xNFJojW_-WqFJ8o7Nw8LDg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.131 Safari/537.36" 172.69.65.114 - - [08/Jul/2025:02:54:28 +0800] "GET /robots.txt HTTP/1.1" 200 64 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" 104.23.190.97 - - [08/Jul/2025:02:58:39 +0800] "GET /?fbclid=IwZXh0bgNhZW0CMTEAAR7zZwre6XpG0F-y-rcdwY8Mc9H-Sy1dS4ovVNMZKx3hc3qOIw4-VmhrUTztFw_aem_MynLbB5K1HWkLNcCd7VxcA HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 104.23.190.68 - - [08/Jul/2025:02:58:42 +0800] "GET /favicon.ico HTTP/1.1" 200 - "https://verifyclick.info/?fbclid=IwZXh0bgNhZW0CMTEAAR7zZwre6XpG0F-y-rcdwY8Mc9H-Sy1dS4ovVNMZKx3hc3qOIw4-VmhrUTztFw_aem_MynLbB5K1HWkLNcCd7VxcA" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 172.70.230.77 - - [08/Jul/2025:03:01:37 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 172.71.195.101 - - [08/Jul/2025:03:03:16 +0800] "GET /?fbclid=IwZXh0bgNhZW0CMTEAAR7CZYrhgTbRc55tCRacmQryuebkGBXgjf7ucJAeQ0KrjwFta_D_pcxFVlQyqA_aem_iyHM9Y8xRz0bWBtA1ielMg HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 172.70.175.179 - - [08/Jul/2025:03:03:18 +0800] "GET /favicon.ico HTTP/1.1" 200 - "https://verifyclick.info/?fbclid=IwZXh0bgNhZW0CMTEAAR7CZYrhgTbRc55tCRacmQryuebkGBXgjf7ucJAeQ0KrjwFta_D_pcxFVlQyqA_aem_iyHM9Y8xRz0bWBtA1ielMg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 172.68.175.17 - - [08/Jul/2025:03:04:50 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36" 141.101.69.39 - - [08/Jul/2025:03:07:21 +0800] "GET /robots.txt HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)" 172.71.130.186 - - [08/Jul/2025:03:07:22 +0800] "GET /choi-co-trach-nhiem-v99win/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)" 172.71.130.91 - - [08/Jul/2025:03:24:52 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.2; http://mj12bot.com/)" 172.71.194.109 - - [08/Jul/2025:03:24:54 +0800] "GET /meo-cuoc/page/3/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)" 172.70.127.181 - - [08/Jul/2025:03:26:23 +0800] "GET /robots.txt HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 108.162.216.180 - - [08/Jul/2025:03:26:23 +0800] "GET /shopdetail/3192128263 HTTP/1.1" 200 125025 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.7151.103 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 108.162.216.180 - - [08/Jul/2025:03:26:28 +0800] "POST /get-message-notify HTTP/1.1" 200 124711 "https://verifyclick.info/shopdetail/3192128263" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.7151.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.164.55 - - [08/Jul/2025:03:37:52 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "https://verifyclick.info" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:129.0) Gecko/20100101 Firefox/129.0" 108.162.216.69 - - [08/Jul/2025:03:45:06 +0800] "GET /huong-dan/ HTTP/1.1" 200 123830 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.7151.103 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.208.25 - - [08/Jul/2025:03:52:00 +0800] "GET /xmlrpc.php HTTP/1.1" 200 - "http://v99win.cafe/xmlrpc.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 172.71.99.153 - - [08/Jul/2025:03:57:35 +0800] "GET / HTTP/1.1" 200 - "http://v99win.cafe" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.71.98.36 - - [08/Jul/2025:03:57:36 +0800] "GET / HTTP/1.1" 200 - "http://v99.cam" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.68.210.110 - - [08/Jul/2025:04:12:14 +0800] "GET /ftzthukh.php HTTP/1.1" 200 137 "-" "Mozilla/5.0(Windows NT 10.0; Win64; x64) AppleWebKit/537.36(KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 172.69.60.181 - - [08/Jul/2025:04:12:16 +0800] "GET /ftzthukh.php?bak HTTP/1.1" 200 171 "-" "Mozilla/5.0(Windows NT 10.0; Win64; x64) AppleWebKit/537.36(KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.23.166.25 - - [08/Jul/2025:04:12:20 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "https://verifyclick.info" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:129.0) Gecko/20100101 Firefox/129.0" 172.69.60.180 - - [08/Jul/2025:04:13:18 +0800] "GET /ftzthukh.php HTTP/1.1" 200 137 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A" 172.68.210.160 - - [08/Jul/2025:04:13:19 +0800] "POST /ftzthukh.php HTTP/1.1" 200 384 "http://v99win.cafe/ftzthukh.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A" 172.68.210.111 - - [08/Jul/2025:04:13:19 +0800] "GET /wp-call.php HTTP/1.1" 200 12062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.36" 162.158.168.156 - - [08/Jul/2025:04:14:30 +0800] "GET /ftzthukh.php HTTP/1.1" 200 137 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A" 172.68.210.160 - - [08/Jul/2025:04:14:31 +0800] "POST /ftzthukh.php HTTP/1.1" 200 389 "http://v99win.cafe/ftzthukh.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A" 172.68.210.119 - - [08/Jul/2025:04:14:31 +0800] "GET /wp-control.php HTTP/1.1" 200 295 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.36" 172.68.210.201 - - [08/Jul/2025:04:14:47 +0800] "GET /ftzthukh.php HTTP/1.1" 200 137 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A" 172.69.60.180 - - [08/Jul/2025:04:14:48 +0800] "POST /ftzthukh.php HTTP/1.1" 200 395 "http://v99win.cafe/ftzthukh.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A" 162.158.168.150 - - [08/Jul/2025:04:14:48 +0800] "GET /wordfence-waf.php HTTP/1.1" 200 54653 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.36" 172.69.176.18 - - [08/Jul/2025:04:40:45 +0800] "GET /.well-known/acme-challenge/THRARZGD94MTAC5UPG5GG2GVAVJDE-Y4 HTTP/1.1" 200 - "-" "Cpanel-HTTP-Client/1.0" 172.70.143.232 - - [08/Jul/2025:04:40:46 +0800] "GET /.well-known/acme-challenge/MDK652VLHM6_486NM-A1LR2I2COJJCWE HTTP/1.1" 200 - "-" "Cpanel-HTTP-Client/1.0" 172.70.207.79 - - [08/Jul/2025:04:49:35 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 162.158.102.60 - - [08/Jul/2025:04:52:19 +0800] "GET /huong-dan-rut-tien-v99win/feed/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.3" 172.69.7.132 - - [08/Jul/2025:04:57:23 +0800] "GET /shopdetail/72323173531 HTTP/1.1" 200 123226 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.7151.103 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.179.171 - - [08/Jul/2025:05:01:24 +0800] "GET /cau-hoi-thuong-gap/ HTTP/1.1" 200 121775 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.7151.103 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.179.171 - - [08/Jul/2025:05:01:29 +0800] "POST /get-message-notify HTTP/1.1" 200 124711 "https://verifyclick.info/cau-hoi-thuong-gap/" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.7151.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.110.184 - - [08/Jul/2025:05:16:58 +0800] "GET /wp-json/wp/v2/posts/564 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.3" 172.68.150.82 - - [08/Jul/2025:05:20:37 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "https://verifyclick.info" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.5672.93 Safari/537.36" 162.158.158.39 - - [08/Jul/2025:05:24:21 +0800] "GET /ban-ca-vang-v99win/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 OPR/117.0.0.0" 141.101.69.40 - - [08/Jul/2025:05:24:57 +0800] "GET /robots.txt HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.2; http://mj12bot.com/)" 172.69.223.154 - - [08/Jul/2025:05:26:13 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.2; http://mj12bot.com/)" 172.71.194.113 - - [08/Jul/2025:05:29:28 +0800] "GET / HTTP/1.1" 200 - "http://v99.cam" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 104.23.209.164 - - [08/Jul/2025:05:37:07 +0800] "GET / HTTP/1.1" 200 - "http://www.v99win.cafe" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.68.211.194 - - [08/Jul/2025:05:38:54 +0800] "GET /robots.txt HTTP/1.1" 200 64 "-" "AliyunSecBot/Aliyun (AliyunSecBot@service.alibaba.com)" 172.68.211.3 - - [08/Jul/2025:05:38:54 +0800] "GET / HTTP/1.1" 200 - "-" "AliyunSecBot/Aliyun (AliyunSecBot@service.alibaba.com)" 162.158.193.177 - - [08/Jul/2025:05:52:46 +0800] "GET /xmlrpc.php HTTP/1.1" 200 - "http://v99win.cafe/xmlrpc.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 172.68.175.64 - - [08/Jul/2025:05:59:26 +0800] "GET /robots.txt HTTP/1.1" 200 64 "-" "Mozilla/5.0 (compatible; wpbot/1.3; +https://forms.gle/ajBaxygz9jSR8p8G9)" 104.23.160.110 - - [08/Jul/2025:05:59:27 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; wpbot/1.3; +https://forms.gle/ajBaxygz9jSR8p8G9)" 172.70.47.21 - - [08/Jul/2025:06:20:01 +0800] "GET / HTTP/1.1" 200 - "-" "-" 172.71.222.86 - - [08/Jul/2025:06:30:31 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "https://verifyclick.info" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0" 162.158.42.176 - - [08/Jul/2025:06:31:49 +0800] "GET /robots.txt HTTP/1.1" 304 - "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.71.118.222 - - [08/Jul/2025:06:40:46 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.2; http://mj12bot.com/)" 172.71.144.70 - - [08/Jul/2025:06:40:49 +0800] "GET /wp-json/custom/v1/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 172.70.247.23 - - [08/Jul/2025:06:40:50 +0800] "GET /wp-content/plugins/cve-2024-46188/views/viewsecurity.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 172.71.222.144 - - [08/Jul/2025:06:46:06 +0800] "GET /shopdetail/25491263906 HTTP/1.1" 200 124968 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.7151.103 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.166.121 - - [08/Jul/2025:06:51:19 +0800] "GET / HTTP/1.1" 200 - "http://www.v99.cam" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 104.23.172.104 - - [08/Jul/2025:06:51:21 +0800] "GET / HTTP/1.1" 200 - "http://www.v99win.cafe" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.71.123.182 - - [08/Jul/2025:07:03:41 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 172.70.143.10 - - [08/Jul/2025:07:06:02 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "https://verifyclick.info" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 104.23.175.252 - - [08/Jul/2025:07:16:03 +0800] "GET / HTTP/1.1" 200 - "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Mobile Safari/537.36" 104.23.175.252 - - [08/Jul/2025:07:16:03 +0800] "GET / HTTP/1.1" 200 - "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Mobile Safari/537.36" 104.23.175.252 - - [08/Jul/2025:07:16:03 +0800] "GET / HTTP/1.1" 200 - "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Mobile Safari/537.36" 172.69.65.113 - - [08/Jul/2025:07:38:20 +0800] "GET /robots.txt HTTP/1.1" 304 - "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.69.176.164 - - [08/Jul/2025:07:40:36 +0800] "GET /.well-known/acme-challenge/PYZ3ZKFH73M7_GG-FFGTSS9DGH8K37HO HTTP/1.1" 200 - "-" "Cpanel-HTTP-Client/1.0" 172.71.82.3 - - [08/Jul/2025:07:40:37 +0800] "GET /.well-known/acme-challenge/HI1NH4WDC--AIVUSL5N7F_Y4BA4XQ1BD HTTP/1.1" 200 - "-" "Cpanel-HTTP-Client/1.0" 162.158.167.126 - - [08/Jul/2025:07:41:39 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "https://verifyclick.info" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.5672.126 Safari/537.36 Edg/113.0.1774.50" 172.70.50.25 - - [08/Jul/2025:07:48:57 +0800] "GET /robots.txt HTTP/1.1" 304 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 172.70.80.196 - - [08/Jul/2025:07:48:58 +0800] "GET /sitemap_index.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 172.70.179.164 - - [08/Jul/2025:08:06:14 +0800] "GET /ads.txt HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.70.131.146 - - [08/Jul/2025:08:06:17 +0800] "GET /ads.txt HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.95.117 - - [08/Jul/2025:08:17:18 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "https://verifyclick.info" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.5790.102 Safari/537.36" 172.71.144.129 - - [08/Jul/2025:08:19:44 +0800] "GET /xmlrpc.php HTTP/1.1" 200 - "http://v99win.cafe/xmlrpc.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 172.69.6.250 - - [08/Jul/2025:08:29:53 +0800] "GET /ads.txt HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.69.17.91 - - [08/Jul/2025:08:29:56 +0800] "GET /ads.txt HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.158.186.5 - - [08/Jul/2025:08:40:33 +0800] "GET /3401fgeaanz92mewttmb6 HTTP/1.1" 200 9634 "-" "Googlebot/2.1 (+http://www.google.com/bot.html)" 172.70.210.138 - - [08/Jul/2025:08:40:34 +0800] "GET /products.php?10965fghaavl32mewttmq30 HTTP/1.1" 200 7126 "-" "Googlebot/2.1 (+http://www.google.com/bot.html)" 172.71.195.56 - - [08/Jul/2025:08:53:11 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "https://verifyclick.info" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.70.176.152 - - [08/Jul/2025:09:02:58 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.106 Safari/537.36" 172.70.176.152 - - [08/Jul/2025:09:02:59 +0800] "GET / HTTP/1.1" 200 117265 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.176.152 - - [08/Jul/2025:09:04:33 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.106 Safari/537.36" 172.70.176.152 - - [08/Jul/2025:09:04:35 +0800] "GET / HTTP/1.1" 200 117265 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.68.150.83 - - [08/Jul/2025:09:04:45 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.106 Safari/537.36" 172.70.176.114 - - [08/Jul/2025:09:04:46 +0800] "GET / HTTP/1.1" 200 117265 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.68.150.56 - - [08/Jul/2025:09:04:49 +0800] "GET /index.php?params=1 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.106 Safari/537.36" 162.158.26.170 - - [08/Jul/2025:09:19:48 +0800] "GET / HTTP/1.1" 200 - "http://v99.cam" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36" 162.158.26.170 - - [08/Jul/2025:09:19:50 +0800] "GET / HTTP/1.1" 200 - "http://v99win.cafe" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36" 162.158.26.171 - - [08/Jul/2025:09:19:57 +0800] "GET / HTTP/1.1" 200 117265 "http://v99win.cafe" "Mozilla/5.0+(compatible;+Googlebot/2.1;++http://www.google.com/bot.html)" 162.158.26.170 - - [08/Jul/2025:09:19:57 +0800] "GET / HTTP/1.1" 200 117265 "http://v99.cam" "Mozilla/5.0+(compatible;+Googlebot/2.1;++http://www.google.com/bot.html)" 104.23.172.88 - - [08/Jul/2025:09:23:03 +0800] "GET / HTTP/1.1" 200 - "https://V99.CAM" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 172.71.95.68 - - [08/Jul/2025:09:28:54 +0800] "GET / HTTP/1.1" 200 - "v99win.cafe" "Mozilla/5.0 (Linux; Android 9; BND-L21 Build/HONORBND-L21) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138 Mobile Safari/537.36 YaApp_Android/10.61 YaSearchBrowser/10.61" 162.158.86.178 - - [08/Jul/2025:09:29:02 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "https://verifyclick.info" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13.3; rv:126.0) Gecko/20100101 Firefox/126.0" 104.23.175.179 - - [08/Jul/2025:09:39:32 +0800] "GET /wp-content/plugins/core/include.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.69.176.168 - - [08/Jul/2025:09:39:34 +0800] "GET /ws.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 162.158.106.6 - - [08/Jul/2025:09:39:37 +0800] "GET /404.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.70.143.49 - - [08/Jul/2025:09:39:40 +0800] "GET /wp.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.68.164.49 - - [08/Jul/2025:09:39:43 +0800] "GET /wp-head.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.69.166.42 - - [08/Jul/2025:09:39:50 +0800] "GET /wp-includes/wp-class.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.70.208.124 - - [08/Jul/2025:09:39:52 +0800] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.70.147.73 - - [08/Jul/2025:09:39:55 +0800] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 162.158.108.31 - - [08/Jul/2025:09:39:59 +0800] "GET /fm1.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 162.158.88.100 - - [08/Jul/2025:09:40:04 +0800] "GET /alfadheat.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.68.164.101 - - [08/Jul/2025:09:40:06 +0800] "GET /M1.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.70.208.161 - - [08/Jul/2025:09:40:26 +0800] "GET /admin.php HTTP/1.1" 500 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.70.208.160 - - [08/Jul/2025:09:40:28 +0800] "GET /wp-admin/images/admin.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.69.176.67 - - [08/Jul/2025:09:40:30 +0800] "GET /alfanew.php7 HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 104.23.175.221 - - [08/Jul/2025:09:40:33 +0800] "GET /.well-known/wso112233.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 104.23.175.52 - - [08/Jul/2025:09:40:35 +0800] "GET /about.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.71.152.33 - - [08/Jul/2025:09:40:38 +0800] "GET /wp-content/shell20211028.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.70.208.124 - - [08/Jul/2025:09:40:40 +0800] "GET /repeater.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.70.143.85 - - [08/Jul/2025:09:40:43 +0800] "GET /wp-content/themes/finley/min.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 162.158.108.54 - - [08/Jul/2025:09:40:47 +0800] "GET /wso112233.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.69.165.16 - - [08/Jul/2025:09:40:49 +0800] "GET /dropdown.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 104.23.175.173 - - [08/Jul/2025:09:40:51 +0800] "GET /wp-admin/dropdown.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 108.162.226.235 - - [08/Jul/2025:09:40:54 +0800] "GET /shell20211028.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 162.158.106.66 - - [08/Jul/2025:09:40:56 +0800] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.70.208.124 - - [08/Jul/2025:09:40:57 +0800] "GET /wp-includes/IXR/themes.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 108.162.227.129 - - [08/Jul/2025:09:41:00 +0800] "GET /.well-known/pki-validation/about.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.71.124.36 - - [08/Jul/2025:09:41:08 +0800] "GET /wp-header.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 162.158.88.101 - - [08/Jul/2025:09:41:10 +0800] "GET /alfanew.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.69.176.43 - - [08/Jul/2025:09:41:12 +0800] "GET /wp-includes/ID3/about.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.69.176.29 - - [08/Jul/2025:09:41:16 +0800] "GET /wp-2019.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 162.158.108.150 - - [08/Jul/2025:09:41:18 +0800] "GET /autoload_classmap.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.69.165.16 - - [08/Jul/2025:09:41:21 +0800] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 162.158.106.118 - - [08/Jul/2025:09:41:24 +0800] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 162.158.88.127 - - [08/Jul/2025:09:41:26 +0800] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.68.242.87 - - [08/Jul/2025:09:41:30 +0800] "GET /wp-content/plugins/about.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.68.242.125 - - [08/Jul/2025:09:41:32 +0800] "GET /wp-content/themes/about.php HTTP/1.1" 200 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 104.23.213.170 - - [08/Jul/2025:09:45:06 +0800] "GET /robots.txt HTTP/1.1" 200 64 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.135.110 - - [08/Jul/2025:09:45:06 +0800] "GET /shopdetail/82663149747 HTTP/1.1" 200 124992 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.7151.103 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.38.6 - - [08/Jul/2025:09:50:09 +0800] "GET /robots.txt HTTP/1.1" 200 64 "-" "Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)" 104.23.211.102 - - [08/Jul/2025:09:50:14 +0800] "GET /featured_item/lookbook-summer/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)" 172.71.98.80 - - [08/Jul/2025:09:51:05 +0800] "GET / HTTP/1.1" 200 - "http://v99win.cafe" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.70.123.12 - - [08/Jul/2025:09:53:51 +0800] "GET / HTTP/1.1" 200 - "http://v99win.cafe" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.70.208.47 - - [08/Jul/2025:09:54:01 +0800] "GET /about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.162.124 - - [08/Jul/2025:09:54:02 +0800] "GET /upload.php?mr=exe3 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 104.23.175.105 - - [08/Jul/2025:09:54:04 +0800] "GET /great1.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.81.53 - - [08/Jul/2025:09:54:06 +0800] "GET /wp-configs.php?p= HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.188.105 - - [08/Jul/2025:09:54:08 +0800] "GET /system_log.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.88.136 - - [08/Jul/2025:09:54:09 +0800] "GET /01.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.88.122 - - [08/Jul/2025:09:54:11 +0800] "GET /akp.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.152.25 - - [08/Jul/2025:09:54:15 +0800] "GET /wp-content/themes/autoload_classmap.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.81.150 - - [08/Jul/2025:09:54:18 +0800] "GET /ty.php?p= HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.208.86 - - [08/Jul/2025:09:54:19 +0800] "GET /fw.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.82.54 - - [08/Jul/2025:09:54:21 +0800] "GET /alfa.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.208.127 - - [08/Jul/2025:09:54:24 +0800] "GET /mini.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.108.32 - - [08/Jul/2025:09:54:26 +0800] "GET /x.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.68.164.152 - - [08/Jul/2025:09:54:28 +0800] "GET /mail.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.69.176.29 - - [08/Jul/2025:09:54:30 +0800] "GET /wp-admin/includes/class-wp-debug-data-constructor.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.170.242 - - [08/Jul/2025:09:54:32 +0800] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.88.67 - - [08/Jul/2025:09:54:35 +0800] "GET /templates/hcapmaster_comps.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.82.4 - - [08/Jul/2025:09:54:36 +0800] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.88.88 - - [08/Jul/2025:09:54:38 +0800] "GET /past.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.106.221 - - [08/Jul/2025:09:54:41 +0800] "GET /wp-admin/network/editor.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 108.162.226.169 - - [08/Jul/2025:09:54:42 +0800] "GET /manager.php?p= HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.108.126 - - [08/Jul/2025:09:54:44 +0800] "GET /wp-admin/maint/wp-mail.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.107.79 - - [08/Jul/2025:09:54:46 +0800] "GET /sidwsi.PhP7 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.143.199 - - [08/Jul/2025:09:54:48 +0800] "GET /cjfuns.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.107.79 - - [08/Jul/2025:09:54:49 +0800] "GET /akc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.189.25 - - [08/Jul/2025:09:54:51 +0800] "GET /wp-content/batm.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 104.23.175.248 - - [08/Jul/2025:09:54:53 +0800] "GET /av.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.142.162 - - [08/Jul/2025:09:54:56 +0800] "GET /wp-content/batm.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 108.162.227.77 - - [08/Jul/2025:09:54:58 +0800] "GET /wp-content/themes/extol/settings.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 104.23.175.129 - - [08/Jul/2025:09:55:00 +0800] "GET /inputs.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.124.36 - - [08/Jul/2025:09:55:01 +0800] "GET /wp-admin/maint/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.142.163 - - [08/Jul/2025:09:55:03 +0800] "GET /alfa-rex.php7 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.142.78 - - [08/Jul/2025:09:55:06 +0800] "GET /mah.php?p= HTTP/1.1" 500 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 104.23.175.185 - - [08/Jul/2025:09:55:06 +0800] "GET /about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.124.30 - - [08/Jul/2025:09:55:09 +0800] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.208.86 - - [08/Jul/2025:09:55:11 +0800] "GET /upload.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.189.112 - - [08/Jul/2025:09:55:13 +0800] "GET /lock360.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.124.207 - - [08/Jul/2025:09:55:15 +0800] "GET /lock.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.147.176 - - [08/Jul/2025:09:55:16 +0800] "GET /.well-known/pki-validation/?p= HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.170.207 - - [08/Jul/2025:09:55:18 +0800] "GET /wp-admin/wp-login.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.124.110 - - [08/Jul/2025:09:55:23 +0800] "GET /pic.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.69.166.74 - - [08/Jul/2025:09:55:25 +0800] "GET /ova-wso.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.162.25 - - [08/Jul/2025:09:55:27 +0800] "GET /av.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.208.167 - - [08/Jul/2025:09:55:30 +0800] "GET /xml.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.124.22 - - [08/Jul/2025:09:55:31 +0800] "GET /1.php?p= HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.147.180 - - [08/Jul/2025:09:55:33 +0800] "GET /.well-known/pki-validation/index.php?p= HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.108.109 - - [08/Jul/2025:09:55:34 +0800] "GET /wp-includes/class-wp-user-wp.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 104.23.175.148 - - [08/Jul/2025:09:55:36 +0800] "GET /moon.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.170.56 - - [08/Jul/2025:09:55:39 +0800] "GET /ws.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.189.79 - - [08/Jul/2025:09:55:40 +0800] "GET /404.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.69.166.44 - - [08/Jul/2025:09:55:42 +0800] "GET /wp-content/plugins/upgrade.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.88.162 - - [08/Jul/2025:09:55:44 +0800] "GET /wp.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.143.52 - - [08/Jul/2025:09:55:44 +0800] "GET /small.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.88.117 - - [08/Jul/2025:09:55:46 +0800] "GET /file5.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.171.11 - - [08/Jul/2025:09:55:48 +0800] "GET /uploader.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.124.47 - - [08/Jul/2025:09:55:49 +0800] "GET /akc.php?kece=akukece@451 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.142.140 - - [08/Jul/2025:09:55:51 +0800] "GET /wp-content/403.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.69.166.63 - - [08/Jul/2025:09:55:53 +0800] "GET /403.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.143.221 - - [08/Jul/2025:09:55:54 +0800] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.82.55 - - [08/Jul/2025:09:55:56 +0800] "GET /marijuana.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 104.23.175.137 - - [08/Jul/2025:09:55:58 +0800] "GET /wp-head.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.124.184 - - [08/Jul/2025:09:56:00 +0800] "GET /wp-content/languages/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.69.176.62 - - [08/Jul/2025:09:56:02 +0800] "GET /wp-includes/wp-class.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.108.77 - - [08/Jul/2025:09:56:04 +0800] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.208.167 - - [08/Jul/2025:09:56:05 +0800] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.124.89 - - [08/Jul/2025:09:56:07 +0800] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.92.238 - - [08/Jul/2025:09:56:11 +0800] "GET /fm1.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.68.164.63 - - [08/Jul/2025:09:56:12 +0800] "GET /baxa1.phP8 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.93.28 - - [08/Jul/2025:09:56:14 +0800] "GET /wp-admin/network/index.php?p= HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.107.100 - - [08/Jul/2025:09:56:15 +0800] "GET /wp-file.php?p= HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.69.176.108 - - [08/Jul/2025:09:56:16 +0800] "GET /admin.php HTTP/1.1" 500 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.124.134 - - [08/Jul/2025:09:56:18 +0800] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 104.23.175.143 - - [08/Jul/2025:09:56:20 +0800] "GET /wp-admin/images/admin.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.208.86 - - [08/Jul/2025:09:56:20 +0800] "GET /wp-content/themes/fremo/mobile.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.107.97 - - [08/Jul/2025:09:56:23 +0800] "GET /wp-content/themes/suntech/css_blocks.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.88.68 - - [08/Jul/2025:09:56:25 +0800] "GET /alfanew.php7 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.152.12 - - [08/Jul/2025:09:56:26 +0800] "GET /wp-content/themes/worship/block-css.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.68.164.158 - - [08/Jul/2025:09:56:28 +0800] "GET /.well-known/wso112233.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.124.35 - - [08/Jul/2025:09:56:31 +0800] "GET /about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.124.201 - - [08/Jul/2025:09:56:33 +0800] "GET /wp-content/shell20211028.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.69.176.43 - - [08/Jul/2025:09:56:34 +0800] "GET /repeater.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.88.163 - - [08/Jul/2025:09:56:36 +0800] "GET /wp-content/themes/finley/min.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.147.162 - - [08/Jul/2025:09:56:39 +0800] "GET /wso112233.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.170.62 - - [08/Jul/2025:09:56:40 +0800] "GET /dropdown.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.88.127 - - [08/Jul/2025:09:56:42 +0800] "GET /wp-admin/dropdown.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.143.235 - - [08/Jul/2025:09:56:44 +0800] "GET /shell20211028.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.108.94 - - [08/Jul/2025:09:56:46 +0800] "GET /wp-admin/css/colors/index.php?p= HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.107.15 - - [08/Jul/2025:09:56:47 +0800] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.124.184 - - [08/Jul/2025:09:56:48 +0800] "GET /themes.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 108.162.227.133 - - [08/Jul/2025:09:56:49 +0800] "GET /wp-includes/IXR/themes.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.108.94 - - [08/Jul/2025:09:56:51 +0800] "GET /wp-content/plugins/core-stab/alogs.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.88.162 - - [08/Jul/2025:09:56:52 +0800] "GET /.well-known/pki-validation/about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.108.44 - - [08/Jul/2025:09:56:54 +0800] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.68.164.141 - - [08/Jul/2025:09:56:56 +0800] "GET /edit.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.208.46 - - [08/Jul/2025:09:56:58 +0800] "GET /wp-header.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.108.168 - - [08/Jul/2025:09:57:00 +0800] "GET /.well-known/pki-validation/?p= HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.147.162 - - [08/Jul/2025:09:57:03 +0800] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.170.109 - - [08/Jul/2025:09:57:05 +0800] "GET /404.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.68.164.77 - - [08/Jul/2025:09:57:06 +0800] "GET /autoload_classmap.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 108.162.227.71 - - [08/Jul/2025:09:57:09 +0800] "GET /alfanew.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.170.28 - - [08/Jul/2025:09:57:10 +0800] "GET /bypass.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.208.166 - - [08/Jul/2025:09:57:12 +0800] "GET /file.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.108.70 - - [08/Jul/2025:09:57:14 +0800] "GET /wp-includes/ID3/about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.208.166 - - [08/Jul/2025:09:57:16 +0800] "GET /wp-2019.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.147.101 - - [08/Jul/2025:09:57:18 +0800] "GET /autoload_classmap.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 104.23.175.183 - - [08/Jul/2025:09:57:19 +0800] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.107.78 - - [08/Jul/2025:09:57:21 +0800] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.142.221 - - [08/Jul/2025:09:57:23 +0800] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.88.115 - - [08/Jul/2025:09:57:24 +0800] "GET /wp-content/plugins/about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.108.152 - - [08/Jul/2025:09:57:26 +0800] "GET /contact.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.208.87 - - [08/Jul/2025:09:57:28 +0800] "GET /wp-links.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 108.162.226.203 - - [08/Jul/2025:09:57:29 +0800] "GET /chosen.php?p= HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.108.95 - - [08/Jul/2025:09:57:32 +0800] "GET /wp-admin/network/admin.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.189.98 - - [08/Jul/2025:09:57:35 +0800] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.88.86 - - [08/Jul/2025:09:57:37 +0800] "GET /wp-content/themes/about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.69.176.18 - - [08/Jul/2025:09:57:39 +0800] "GET /settings.php?p= HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.124.225 - - [08/Jul/2025:09:57:40 +0800] "GET /xleet.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.208.127 - - [08/Jul/2025:09:57:42 +0800] "GET /wp-content/uploads/2024/index.php?p= HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.143.220 - - [08/Jul/2025:09:57:44 +0800] "GET /wp-admin/network/class.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 104.23.175.172 - - [08/Jul/2025:09:57:46 +0800] "GET /class.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 108.162.227.37 - - [08/Jul/2025:09:57:49 +0800] "GET /chosen.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.88.125 - - [08/Jul/2025:09:57:50 +0800] "GET /simple.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.88.37 - - [08/Jul/2025:09:57:52 +0800] "GET /wp-admin/network/MdFvb.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.81.29 - - [08/Jul/2025:09:57:55 +0800] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 104.23.175.244 - - [08/Jul/2025:09:57:57 +0800] "GET /bless.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 104.23.175.143 - - [08/Jul/2025:09:57:59 +0800] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.69.165.70 - - [08/Jul/2025:09:58:00 +0800] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.142.155 - - [08/Jul/2025:09:58:03 +0800] "GET /ini.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.69.176.42 - - [08/Jul/2025:09:58:04 +0800] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.68.242.52 - - [08/Jul/2025:09:58:05 +0800] "GET /wp-admin/network/ayk.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.163.180 - - [08/Jul/2025:09:58:07 +0800] "GET /ayk.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.68.164.153 - - [08/Jul/2025:09:58:09 +0800] "GET /bak.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.68.164.62 - - [08/Jul/2025:09:58:11 +0800] "GET /admin.php?p= HTTP/1.1" 500 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.170.23 - - [08/Jul/2025:09:58:11 +0800] "GET /wp-admin/css/colors/blue/?p= HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.162.117 - - [08/Jul/2025:09:58:15 +0800] "GET /wp-content/themes/bute/lang.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.208.87 - - [08/Jul/2025:09:58:16 +0800] "GET /mah.php HTTP/1.1" 500 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.69.165.30 - - [08/Jul/2025:09:58:16 +0800] "GET /index/function.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 108.162.226.128 - - [08/Jul/2025:09:58:20 +0800] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.208.126 - - [08/Jul/2025:09:58:21 +0800] "GET /cong.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.88.171 - - [08/Jul/2025:09:58:23 +0800] "GET /atomlib.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.208.87 - - [08/Jul/2025:09:58:26 +0800] "GET /radio.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.208.166 - - [08/Jul/2025:09:58:30 +0800] "GET /wso-x569.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.142.154 - - [08/Jul/2025:09:58:31 +0800] "GET /wp-content/plugins/WordPressCore/wp.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.81.27 - - [08/Jul/2025:09:58:33 +0800] "GET /wp-content/uploads/2023/12/mar.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.170.35 - - [08/Jul/2025:09:58:35 +0800] "GET /css/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.147.85 - - [08/Jul/2025:09:58:38 +0800] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.208.167 - - [08/Jul/2025:09:58:40 +0800] "GET /wp-content/uploads/json.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.189.41 - - [08/Jul/2025:09:58:42 +0800] "GET /wp-content/themes/blogai/issue.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.92.239 - - [08/Jul/2025:09:58:44 +0800] "GET /wp-content/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.142.111 - - [08/Jul/2025:09:58:46 +0800] "GET /.well-known/about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 108.162.227.12 - - [08/Jul/2025:09:58:48 +0800] "GET /lufix.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.92.180 - - [08/Jul/2025:09:58:49 +0800] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.81.139 - - [08/Jul/2025:09:58:50 +0800] "GET /randkeyword.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 108.162.227.121 - - [08/Jul/2025:09:58:52 +0800] "GET /aa.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 104.23.175.173 - - [08/Jul/2025:09:58:53 +0800] "GET /admin.php HTTP/1.1" 500 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 104.23.175.82 - - [08/Jul/2025:09:58:54 +0800] "GET /wp-22.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.189.37 - - [08/Jul/2025:09:58:55 +0800] "GET /1index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 104.23.175.178 - - [08/Jul/2025:09:58:57 +0800] "GET /marijuana.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.170.127 - - [08/Jul/2025:09:58:59 +0800] "GET /good.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.68.164.88 - - [08/Jul/2025:09:59:02 +0800] "GET /up.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 104.23.175.173 - - [08/Jul/2025:09:59:03 +0800] "GET /fm.php?p= HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.69.176.169 - - [08/Jul/2025:09:59:04 +0800] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.124.18 - - [08/Jul/2025:09:59:06 +0800] "GET /radio.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.69.176.44 - - [08/Jul/2025:09:59:08 +0800] "GET /wp-includes/1index.php?pass=am*guAW8.ryDgz-TYF HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.124.9 - - [08/Jul/2025:09:59:10 +0800] "GET /1index.php?pass=am*guAW8.ryDgz-TYF HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.106.113 - - [08/Jul/2025:09:59:11 +0800] "GET /wp_wrong_datlib.php?pass=stusa HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.81.249 - - [08/Jul/2025:09:59:13 +0800] "GET /2index.php?pass=am*guAW8.ryDgz-TYF HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 104.23.175.220 - - [08/Jul/2025:09:59:15 +0800] "GET /autoload_classmap.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.147.194 - - [08/Jul/2025:09:59:16 +0800] "GET /k.php?p= HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.124.19 - - [08/Jul/2025:09:59:17 +0800] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.147.177 - - [08/Jul/2025:09:59:20 +0800] "GET /wp-2019.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.68.242.31 - - [08/Jul/2025:09:59:21 +0800] "GET /1h6j5.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.69.176.96 - - [08/Jul/2025:09:59:22 +0800] "GET /wp-admin/setup-config.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 108.162.226.129 - - [08/Jul/2025:09:59:25 +0800] "GET /wp-admin/xleet.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.68.164.108 - - [08/Jul/2025:09:59:27 +0800] "GET /wp-content/fw.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.208.47 - - [08/Jul/2025:09:59:28 +0800] "GET /wp-admin/fx.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.124.48 - - [08/Jul/2025:09:59:30 +0800] "GET /.well-known/pki-validation/dns.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.208.47 - - [08/Jul/2025:09:59:32 +0800] "GET /wp-info.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.189.127 - - [08/Jul/2025:09:59:33 +0800] "GET /utchiha.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.152.26 - - [08/Jul/2025:09:59:36 +0800] "GET /wp-admin/priv8.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.106.37 - - [08/Jul/2025:09:59:37 +0800] "GET /wp-admin/rss.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.81.13 - - [08/Jul/2025:09:59:39 +0800] "GET /uploads/xleet.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.68.164.118 - - [08/Jul/2025:09:59:41 +0800] "GET /ALFA_DATA/alfacgiapi HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.68.164.80 - - [08/Jul/2025:09:59:42 +0800] "GET /wp-admin/Fox-C HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.124.57 - - [08/Jul/2025:09:59:45 +0800] "GET /wp-admin/Fox-C404 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.158.88.105 - - [08/Jul/2025:09:59:46 +0800] "GET /Fox-C40 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 108.162.226.166 - - [08/Jul/2025:09:59:48 +0800] "GET /wp-admin/ALFA_DATA/alfacgiapi/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.189.70 - - [08/Jul/2025:09:59:51 +0800] "GET /wp-admin/Panels.txt HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.71.124.12 - - [08/Jul/2025:09:59:52 +0800] "GET /Panels.txt/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 172.70.208.125 - - [08/Jul/2025:10:06:16 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "https://verifyclick.info" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:129.0) Gecko/20100101 Firefox/129.0" 172.68.118.249 - - [08/Jul/2025:10:09:47 +0800] "GET / HTTP/1.1" 200 - "http://www.v99.cam" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.71.218.205 - - [08/Jul/2025:10:15:08 +0800] "GET /yasnu.php HTTP/1.1" 200 35154 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 162.158.193.64 - - [08/Jul/2025:10:15:11 +0800] "GET /favicon.ico HTTP/1.1" 200 - "https://verifyclick.info/yasnu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 172.71.218.44 - - [08/Jul/2025:10:15:17 +0800] "POST /yasnu.php HTTP/1.1" 200 36738 "https://verifyclick.info/yasnu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 172.71.218.44 - - [08/Jul/2025:10:15:19 +0800] "GET /yasnu.php?p=2f686f6d652f6165763939392f7075626c69635f68746d6c2f766572696679636c69636b2e696e666f HTTP/1.1" 200 36497 "https://verifyclick.info/yasnu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 172.71.218.44 - - [08/Jul/2025:10:15:22 +0800] "POST /yasnu.php?p=2f686f6d652f6165763939392f7075626c69635f68746d6c2f766572696679636c69636b2e696e666f HTTP/1.1" 200 38081 "https://verifyclick.info/yasnu.php?p=2f686f6d652f6165763939392f7075626c69635f68746d6c2f766572696679636c69636b2e696e666f" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 172.71.218.44 - - [08/Jul/2025:10:15:24 +0800] "GET /yasnu.php?p=2f686f6d652f6165763939392f7075626c69635f68746d6c2f766572696679636c69636b2e696e666f HTTP/1.1" 200 37840 "https://verifyclick.info/yasnu.php?p=2f686f6d652f6165763939392f7075626c69635f68746d6c2f766572696679636c69636b2e696e666f" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 172.70.142.184 - - [08/Jul/2025:10:19:13 +0800] "GET /lock360.php HTTP/1.1" 200 - "http://v99win.cafe/lock360.php" "Go-http-client/1.1" 172.68.164.39 - - [08/Jul/2025:10:19:14 +0800] "GET /1.php HTTP/1.1" 200 - "http://v99win.cafe/1.php" "Go-http-client/2.0" 172.68.164.39 - - [08/Jul/2025:10:19:14 +0800] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/plugins/pwnd/pwnd.php" "Go-http-client/2.0" 172.68.164.39 - - [08/Jul/2025:10:19:15 +0800] "GET /fw.php HTTP/1.1" 200 - "http://v99win.cafe/fw.php" "Go-http-client/2.0" 172.68.164.39 - - [08/Jul/2025:10:19:15 +0800] "GET /templates/beez3/jsstrings.php HTTP/1.1" 200 - "http://v99win.cafe/templates/beez3/jsstrings.php" "Go-http-client/2.0" 172.68.164.39 - - [08/Jul/2025:10:19:16 +0800] "GET /w.php HTTP/1.1" 200 - "http://v99win.cafe/w.php" "Go-http-client/2.0" 172.68.164.39 - - [08/Jul/2025:10:19:17 +0800] "GET /ss.php HTTP/1.1" 200 - "http://v99win.cafe/ss.php" "Go-http-client/2.0" 172.68.164.39 - - [08/Jul/2025:10:19:17 +0800] "GET /wp-admin/includes/let.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/includes/let.php" "Go-http-client/2.0" 172.68.164.39 - - [08/Jul/2025:10:19:18 +0800] "GET /worksec.php HTTP/1.1" 200 - "http://v99win.cafe/worksec.php" "Go-http-client/2.0" 172.68.164.39 - - [08/Jul/2025:10:19:18 +0800] "GET /bypass.php HTTP/1.1" 200 - "http://v99win.cafe/bypass.php" "Go-http-client/2.0" 172.68.164.39 - - [08/Jul/2025:10:19:19 +0800] "GET /back.php HTTP/1.1" 200 - "http://v99win.cafe/back.php" "Go-http-client/2.0" 172.68.164.39 - - [08/Jul/2025:10:19:19 +0800] "GET /wp-content/max.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/max.php" "Go-http-client/2.0" 172.68.164.39 - - [08/Jul/2025:10:19:20 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/themes/index.php" "Go-http-client/2.0" 172.68.164.39 - - [08/Jul/2025:10:19:20 +0800] "GET /wp-content/tini.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/tini.php" "Go-http-client/2.0" 172.68.164.39 - - [08/Jul/2025:10:19:21 +0800] "GET /wp-admin/maint/index.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/maint/index.php" "Go-http-client/2.0" 172.68.164.39 - - [08/Jul/2025:10:19:21 +0800] "GET /wp-content/themes/news-portal/error.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/themes/news-portal/error.php" "Go-http-client/2.0" 172.68.164.39 - - [08/Jul/2025:10:19:22 +0800] "GET /about.php HTTP/1.1" 200 - "http://v99win.cafe/about.php" "Go-http-client/2.0" 172.68.164.39 - - [08/Jul/2025:10:19:23 +0800] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/css/colors/sunrise/" "Go-http-client/2.0" 172.68.164.39 - - [08/Jul/2025:10:19:23 +0800] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/blocks/calendar/index.php" "Go-http-client/2.0" 172.68.164.39 - - [08/Jul/2025:10:19:24 +0800] "GET /wp-includes/ID3/ HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/ID3/" "Go-http-client/2.0" 172.68.164.39 - - [08/Jul/2025:10:19:24 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/themes/admin.php" "Go-http-client/2.0" 172.68.164.39 - - [08/Jul/2025:10:19:25 +0800] "GET /wp-content/plugins/erinyani/gebase.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/plugins/erinyani/gebase.php" "Go-http-client/2.0" 172.68.164.39 - - [08/Jul/2025:10:19:25 +0800] "GET /he.php HTTP/1.1" 200 - "http://v99win.cafe/he.php" "Go-http-client/2.0" 172.68.164.39 - - [08/Jul/2025:10:19:26 +0800] "GET /.wp/wso.php HTTP/1.1" 200 - "http://v99win.cafe/.wp/wso.php" "Go-http-client/2.0" 172.68.164.39 - - [08/Jul/2025:10:19:27 +0800] "GET /olux.php HTTP/1.1" 200 - "http://v99win.cafe/olux.php" "Go-http-client/2.0" 172.68.164.39 - - [08/Jul/2025:10:19:27 +0800] "GET /edit-tags.php HTTP/1.1" 200 - "http://v99win.cafe/edit-tags.php" "Go-http-client/2.0" 172.68.164.39 - - [08/Jul/2025:10:19:28 +0800] "GET /wp-includes/class-json-ajax-session.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/class-json-ajax-session.php" "Go-http-client/2.0" 172.68.164.120 - - [08/Jul/2025:10:19:28 +0800] "GET /admin.php HTTP/1.1" 500 - "http://v99win.cafe/admin.php" "Go-http-client/2.0" 172.68.164.120 - - [08/Jul/2025:10:19:28 +0800] "GET /load.php HTTP/1.1" 200 - "http://v99win.cafe/load.php" "Go-http-client/2.0" 172.68.164.120 - - [08/Jul/2025:10:19:29 +0800] "GET /wp-admin/js/about.php7 HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/js/about.php7" "Go-http-client/2.0" 172.68.164.120 - - [08/Jul/2025:10:19:30 +0800] "GET /wp-includes/css/dist/reusable-blocks/ HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/css/dist/reusable-blocks/" "Go-http-client/2.0" 172.68.164.120 - - [08/Jul/2025:10:19:30 +0800] "GET /wp-admin/css/colors/light/tini.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/css/colors/light/tini.php" "Go-http-client/2.0" 172.68.164.120 - - [08/Jul/2025:10:19:31 +0800] "GET /db.php/wp-content/plugins/xltavrat.php HTTP/1.1" 200 - "http://v99win.cafe/db.php/wp-content/plugins/xltavrat.php" "Go-http-client/2.0" 172.68.164.120 - - [08/Jul/2025:10:19:31 +0800] "GET /wp-includes/blocks/site-title/ HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/blocks/site-title/" "Go-http-client/2.0" 172.68.164.120 - - [08/Jul/2025:10:19:32 +0800] "GET /test.php/wp-content/uploads/wp_live_chat/abruzi.php HTTP/1.1" 200 - "http://v99win.cafe/test.php/wp-content/uploads/wp_live_chat/abruzi.php" "Go-http-client/2.0" 172.68.164.120 - - [08/Jul/2025:10:19:32 +0800] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/css/dist/edit-widgets/" "Go-http-client/2.0" 172.68.164.120 - - [08/Jul/2025:10:19:33 +0800] "GET /wp-admin.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin.php" "Go-http-client/2.0" 172.68.164.120 - - [08/Jul/2025:10:19:33 +0800] "GET /wp-includes/assets/ HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/assets/" "Go-http-client/2.0" 172.68.164.120 - - [08/Jul/2025:10:19:34 +0800] "GET /wp-content/classwithtostring.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/classwithtostring.php" "Go-http-client/2.0" 172.68.164.120 - - [08/Jul/2025:10:19:35 +0800] "GET /yasnu.php HTTP/1.1" 200 37840 "http://v99win.cafe/yasnu.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:16 +0800] "GET /writeable.php HTTP/1.1" 200 - "http://v99win.cafe/writeable.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:17 +0800] "GET /wp-includes/js/index.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/js/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:18 +0800] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 200 - "http://v99win.cafe/.well-known/acme-challenge/about.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:18 +0800] "GET /wp-content/uploads/about.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/uploads/about.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:19 +0800] "GET /wp-includes/customize/index.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/customize/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:19 +0800] "GET /wp-admin/admin.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/admin.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:20 +0800] "GET /wp-admin/user/index.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/user/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:20 +0800] "GET /wp-content/plugins/psieqdm/index.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/plugins/psieqdm/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:21 +0800] "GET /wp-content/plugins/ioxi/alfa-ioxi.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/plugins/ioxi/alfa-ioxi.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:21 +0800] "GET /wp-content/plugins/phpadmin/acp.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/plugins/phpadmin/acp.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:22 +0800] "GET /wp-admin/css/color/blue/maintenence.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/css/color/blue/maintenence.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:23 +0800] "GET /wp-activate.php HTTP/1.1" 200 - "http://v99win.cafe/wp-activate.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:23 +0800] "GET /templates/beez3/index.php HTTP/1.1" 200 - "http://v99win.cafe/templates/beez3/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:24 +0800] "GET /insoamv.php HTTP/1.1" 200 - "http://v99win.cafe/insoamv.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:24 +0800] "GET /hehehehe.php HTTP/1.1" 200 - "http://v99win.cafe/hehehehe.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:25 +0800] "GET /print/bkindex.php HTTP/1.1" 200 - "http://v99win.cafe/print/bkindex.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:25 +0800] "GET /wp-includes/fonts/about.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/fonts/about.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:26 +0800] "GET /wp-admin/images/about.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/images/about.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:26 +0800] "GET /edit.php HTTP/1.1" 200 - "http://v99win.cafe/edit.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:27 +0800] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/themes/seotheme/mar.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:28 +0800] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/plugins/seoplugins/mar.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:28 +0800] "GET /wp-content/index.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:29 +0800] "GET /sad/about.php HTTP/1.1" 200 - "http://v99win.cafe/sad/about.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:29 +0800] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/plugins/not/includes/about.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:30 +0800] "GET /wp-add.php HTTP/1.1" 200 - "http://v99win.cafe/wp-add.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:30 +0800] "GET /vendor/bin/loader.php HTTP/1.1" 200 - "http://v99win.cafe/vendor/bin/loader.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:31 +0800] "GET /wp-admin/network/back.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/network/back.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:32 +0800] "GET /back.php HTTP/1.1" 200 - "http://v99win.cafe/back.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:32 +0800] "GET /ova.php HTTP/1.1" 200 - "http://v99win.cafe/ova.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:33 +0800] "GET /wp-content/x/index.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/x/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:33 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 200 - "http://v99win.cafe/randkeyword.PhP7" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:34 +0800] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/themes/digital-download/new.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:34 +0800] "GET /ticket/vendor/htmlawed/htmlawed/gel4y.php HTTP/1.1" 200 - "http://v99win.cafe/ticket/vendor/htmlawed/htmlawed/gel4y.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:35 +0800] "GET /glpi/vendor/network.php HTTP/1.1" 200 - "http://v99win.cafe/glpi/vendor/network.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:35 +0800] "GET /vendor/htmlawed/htmlawed/gel4y.php HTTP/1.1" 200 - "http://v99win.cafe/vendor/htmlawed/htmlawed/gel4y.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:36 +0800] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/network.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/sodium_compat/src/Core/Curve25519/Ge/network.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:37 +0800] "GET /wp-22.php?bction=ping HTTP/1.1" 404 - "http://v99win.cafe/wp-22.php?bction=ping" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:37 +0800] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/plugins/core-plugin/include.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:37 +0800] "GET /upload.php HTTP/1.1" 200 - "http://v99win.cafe/upload.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:38 +0800] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/plugins/WordPressCore/include.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:38 +0800] "GET /about.php HTTP/1.1" 200 - "http://v99win.cafe/about.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:39 +0800] "GET /chosen.php HTTP/1.1" 200 - "http://v99win.cafe/chosen.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:39 +0800] "GET /admin.php HTTP/1.1" 500 - "http://v99win.cafe/admin.php" "Go-http-client/2.0" 162.158.107.4 - - [08/Jul/2025:10:22:40 +0800] "GET /file.php HTTP/1.1" 200 - "http://v99win.cafe/file.php" "Go-http-client/2.0" 162.158.107.4 - - [08/Jul/2025:10:22:40 +0800] "GET /simple.php HTTP/1.1" 200 - "http://v99win.cafe/simple.php" "Go-http-client/2.0" 162.158.107.4 - - [08/Jul/2025:10:22:41 +0800] "GET /alfanew.PhP7 HTTP/1.1" 200 - "http://v99win.cafe/alfanew.PhP7" "Go-http-client/2.0" 162.158.107.4 - - [08/Jul/2025:10:22:41 +0800] "GET /mah.php HTTP/1.1" 500 - "http://v99win.cafe/mah.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:41 +0800] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/plugins/revslider/includes/external/page/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:42 +0800] "GET /css/index.php HTTP/1.1" 200 - "http://v99win.cafe/css/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:42 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/plugins/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:43 +0800] "GET /test.php HTTP/1.1" 200 - "http://v99win.cafe/test.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:44 +0800] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/plugins/pwnd/pwnd.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:44 +0800] "GET /wp-admin/maint/index.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/maint/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:45 +0800] "GET /dropdown.php HTTP/1.1" 200 - "http://v99win.cafe/dropdown.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:45 +0800] "GET /wp-content/ HTTP/1.1" 200 - "http://v99win.cafe/wp-content/" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:46 +0800] "GET /home.php?xsec=team HTTP/1.1" 200 - "http://v99win.cafe/home.php?xsec=team" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:46 +0800] "GET /themes.php HTTP/1.1" 200 - "http://v99win.cafe/themes.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:47 +0800] "GET /1.php HTTP/1.1" 200 - "http://v99win.cafe/1.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:48 +0800] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/themes/sketch/404.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:48 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/uploads/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:49 +0800] "GET /wp-content/languages/index.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/languages/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:49 +0800] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 200 - "http://v99win.cafe/.well-known/pki-validation/moon.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:50 +0800] "GET /wp-login.php HTTP/1.1" 200 - "http://v99win.cafe/wp-login.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:50 +0800] "GET /wp-admin/js/index.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/js/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:51 +0800] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 200 - "http://v99win.cafe/wp-content/themes/pridmag/db.php?u" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:52 +0800] "GET /wp-content/admin.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/admin.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:52 +0800] "GET /index/function.php HTTP/1.1" 200 - "http://v99win.cafe/index/function.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:53 +0800] "GET /lala.php HTTP/1.1" 200 - "http://v99win.cafe/lala.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:53 +0800] "GET /wp-includes/assets/index.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/assets/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:54 +0800] "GET /shell.php HTTP/1.1" 200 - "http://v99win.cafe/shell.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:54 +0800] "GET /about/function.php HTTP/1.1" 200 - "http://v99win.cafe/about/function.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:55 +0800] "GET /lock.php HTTP/1.1" 200 - "http://v99win.cafe/lock.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:55 +0800] "GET /autoload_classmap.php HTTP/1.1" 200 - "http://v99win.cafe/autoload_classmap.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:56 +0800] "GET /goods.php HTTP/1.1" 200 - "http://v99win.cafe/goods.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:57 +0800] "GET /x/index.php HTTP/1.1" 200 - "http://v99win.cafe/x/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:57 +0800] "GET /uploader.php HTTP/1.1" 200 - "http://v99win.cafe/uploader.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:58 +0800] "GET /credits.php HTTP/1.1" 200 - "http://v99win.cafe/credits.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:58 +0800] "GET /wp-links.php HTTP/1.1" 200 - "http://v99win.cafe/wp-links.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:59 +0800] "GET /wp-admin/images/index.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/images/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:22:59 +0800] "GET /wp-header.php HTTP/1.1" 200 - "http://v99win.cafe/wp-header.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:00 +0800] "GET /wp-admin/css/index.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/css/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:01 +0800] "GET /wp-admin/css/colors/index.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/css/colors/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:01 +0800] "GET /cong.php HTTP/1.1" 200 - "http://v99win.cafe/cong.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:02 +0800] "GET /en/index.php HTTP/1.1" 200 - "http://v99win.cafe/en/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:02 +0800] "GET /wp-includes/widgets/include.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/widgets/include.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:03 +0800] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/css/colors/blue/" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:03 +0800] "GET /jindex.php HTTP/1.1" 200 - "http://v99win.cafe/jindex.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:04 +0800] "GET /b.php HTTP/1.1" 200 - "http://v99win.cafe/b.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:04 +0800] "GET /function.php HTTP/1.1" 200 - "http://v99win.cafe/function.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:05 +0800] "GET /classwithtostring.php HTTP/1.1" 200 - "http://v99win.cafe/classwithtostring.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:06 +0800] "GET /404.php HTTP/1.1" 200 - "http://v99win.cafe/404.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:06 +0800] "GET /wp-mail.php HTTP/1.1" 200 - "http://v99win.cafe/wp-mail.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:07 +0800] "GET /moon.php HTTP/1.1" 200 - "http://v99win.cafe/moon.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:07 +0800] "GET /wp-info.php HTTP/1.1" 200 - "http://v99win.cafe/wp-info.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:08 +0800] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/js/jcrop/Jcrop.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:08 +0800] "GET /a.php HTTP/1.1" 200 - "http://v99win.cafe/a.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:09 +0800] "GET /wp-admin.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:09 +0800] "GET /atomlib.php HTTP/1.1" 200 - "http://v99win.cafe/atomlib.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:10 +0800] "GET /wp-content/themes.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/themes.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:11 +0800] "GET /wp.php HTTP/1.1" 200 - "http://v99win.cafe/wp.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:11 +0800] "GET /wp-includes/rest-api/index.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/rest-api/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:12 +0800] "GET /fm.php HTTP/1.1" 200 - "http://v99win.cafe/fm.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:12 +0800] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/themes/twentyfive/include.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:13 +0800] "GET /wso.php HTTP/1.1" 200 - "http://v99win.cafe/wso.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:13 +0800] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/plugins/ubh/up.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:14 +0800] "GET /text.php HTTP/1.1" 200 - "http://v99win.cafe/text.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:14 +0800] "GET /content.php HTTP/1.1" 200 - "http://v99win.cafe/content.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:15 +0800] "GET /install.php HTTP/1.1" 200 - "http://v99win.cafe/install.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:16 +0800] "GET /ova-tools.php HTTP/1.1" 200 - "http://v99win.cafe/ova-tools.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:16 +0800] "GET /wp-conflg.php HTTP/1.1" 200 - "http://v99win.cafe/wp-conflg.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:17 +0800] "GET /log.php HTTP/1.1" 200 - "http://v99win.cafe/log.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:17 +0800] "GET /radio.php HTTP/1.1" 200 - "http://v99win.cafe/radio.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:18 +0800] "GET /wp-includes/wp-login.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/wp-login.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:18 +0800] "GET /xml.php HTTP/1.1" 200 - "http://v99win.cafe/xml.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:19 +0800] "GET /wp-includes/images/wp-login.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/images/wp-login.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:20 +0800] "GET /.well-known/pki-validation/index.php HTTP/1.1" 200 - "http://v99win.cafe/.well-known/pki-validation/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:20 +0800] "GET /wp-admin/user/about.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/user/about.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:21 +0800] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/SimplePie/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:21 +0800] "GET /inc.php HTTP/1.1" 200 - "http://v99win.cafe/inc.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:22 +0800] "GET /wp-includes/item.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/item.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:22 +0800] "GET /.well-known/ HTTP/1.1" 200 1032 "http://v99win.cafe/.well-known/" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:23 +0800] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/Text/wp-login.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:23 +0800] "GET /wp-content/plugins/hello.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/plugins/hello.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:24 +0800] "GET /wp-includes/admin.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/admin.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:24 +0800] "GET /web.php HTTP/1.1" 200 - "http://v99win.cafe/web.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:25 +0800] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/fonts/wp-login.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:25 +0800] "GET /wp-content/classwithtostring.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/classwithtostring.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:26 +0800] "GET /wp-includes/Text/about.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/Text/about.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:27 +0800] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/css/colors/coffee/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:27 +0800] "GET /wp-content/tmpls.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/tmpls.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:28 +0800] "GET /cjfuns.php HTTP/1.1" 200 - "http://v99win.cafe/cjfuns.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:28 +0800] "GET /wp-admin/css/about.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/css/about.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:29 +0800] "GET /1.php?apx=upx HTTP/1.1" 200 - "http://v99win.cafe/1.php?apx=upx" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:29 +0800] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 200 - "http://v99win.cafe/.well-known/pki-validation/xmrlpc.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:30 +0800] "GET /jp.php HTTP/1.1" 200 - "http://v99win.cafe/jp.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:30 +0800] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/uploads/wp-login.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:31 +0800] "GET /wp-admin/network/wp-login.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/network/wp-login.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:32 +0800] "GET /wp-includes/customize/about.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/customize/about.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:32 +0800] "GET /wp-includes/rest-api/about.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/rest-api/about.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:33 +0800] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/plugins/dummyyummy/wp-signup.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:33 +0800] "GET /alfa.php HTTP/1.1" 200 - "http://v99win.cafe/alfa.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:34 +0800] "GET /wp-admin/js/network.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/js/network.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:34 +0800] "GET /wp-admin/images/admin.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/images/admin.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:35 +0800] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/plugins/press/wp-class.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:36 +0800] "GET /wp-admin/wso.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/wso.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:36 +0800] "GET /worksec.php HTTP/1.1" 200 - "http://v99win.cafe/worksec.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:37 +0800] "GET /wp-includes/fonts/index.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/fonts/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:37 +0800] "GET /wp-includes/css/index.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/css/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:38 +0800] "GET /up.php HTTP/1.1" 200 - "http://v99win.cafe/up.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:38 +0800] "GET /wp-signup.php HTTP/1.1" 200 - "http://v99win.cafe/wp-signup.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:39 +0800] "GET /wp-content/cong.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/cong.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:39 +0800] "GET /byp.php HTTP/1.1" 200 - "http://v99win.cafe/byp.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:40 +0800] "GET /504.php HTTP/1.1" 200 - "http://v99win.cafe/504.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:41 +0800] "GET /wp-admin/about.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/about.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:41 +0800] "GET /403.php HTTP/1.1" 200 - "http://v99win.cafe/403.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:42 +0800] "GET /wp-includes/style-engine/about.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/style-engine/about.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:42 +0800] "GET /goat.php HTTP/1.1" 200 - "http://v99win.cafe/goat.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:43 +0800] "GET /wp-content/mah.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/mah.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:43 +0800] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/IXR/wp-login.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:44 +0800] "GET /wp-includes/mah.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/mah.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:44 +0800] "GET /wp-2019.php HTTP/1.1" 200 - "http://v99win.cafe/wp-2019.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:45 +0800] "GET /.tmb/cloud.php HTTP/1.1" 200 - "http://v99win.cafe/.tmb/cloud.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:46 +0800] "GET /xt/index.php HTTP/1.1" 200 - "http://v99win.cafe/xt/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:46 +0800] "GET /init.php HTTP/1.1" 200 - "http://v99win.cafe/init.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:47 +0800] "GET /wp-admin/classwithtostring.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/classwithtostring.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:47 +0800] "GET /wp-config-sample.php HTTP/1.1" 200 - "http://v99win.cafe/wp-config-sample.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:48 +0800] "GET /sidwsi.PhP7 HTTP/1.1" 200 - "http://v99win.cafe/sidwsi.PhP7" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:48 +0800] "GET /wp-content/radio.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/radio.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:49 +0800] "GET /wp-admin/dropdown.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/dropdown.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:49 +0800] "GET /xmlrpc.php HTTP/1.1" 200 - "http://v99win.cafe/xmlrpc.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:50 +0800] "GET /wp-l0gin.php HTTP/1.1" 200 - "http://v99win.cafe/wp-l0gin.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:51 +0800] "GET /s.php HTTP/1.1" 200 - "http://v99win.cafe/s.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:51 +0800] "GET /lock360.php HTTP/1.1" 200 - "http://v99win.cafe/lock360.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:52 +0800] "GET /ioxi-rex3.php7 HTTP/1.1" 200 - "http://v99win.cafe/ioxi-rex3.php7" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:52 +0800] "GET /mini.php HTTP/1.1" 200 - "http://v99win.cafe/mini.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:53 +0800] "GET /alfa-rex.php8 HTTP/1.1" 200 - "http://v99win.cafe/alfa-rex.php8" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:53 +0800] "GET /wp-content/themes/include.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/themes/include.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:54 +0800] "GET /defaul1.php HTTP/1.1" 200 - "http://v99win.cafe/defaul1.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:55 +0800] "GET /wp-includes/product.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/product.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:55 +0800] "GET /m.php HTTP/1.1" 200 - "http://v99win.cafe/m.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:56 +0800] "GET /shell20211028.php HTTP/1.1" 200 - "http://v99win.cafe/shell20211028.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:56 +0800] "GET /fw.php HTTP/1.1" 200 - "http://v99win.cafe/fw.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:57 +0800] "GET /wp-admin/js/about.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/js/about.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:57 +0800] "GET /x.php HTTP/1.1" 200 - "http://v99win.cafe/x.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:58 +0800] "GET /wp-content/shell.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/shell.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:58 +0800] "GET /wp-content/json.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/json.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:23:59 +0800] "GET /randkeyword.php HTTP/1.1" 200 - "http://v99win.cafe/randkeyword.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:00 +0800] "GET /doc.php HTTP/1.1" 200 - "http://v99win.cafe/doc.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:00 +0800] "GET /rc.php HTTP/1.1" 200 - "http://v99win.cafe/rc.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:01 +0800] "GET /wp-includes/ID3/about.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/ID3/about.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:01 +0800] "GET /wp-content/item.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/item.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:02 +0800] "GET /defaults.php HTTP/1.1" 200 - "http://v99win.cafe/defaults.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:02 +0800] "GET /wp-includes/Requests/network.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/Requests/network.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:03 +0800] "GET /editor.php HTTP/1.1" 200 - "http://v99win.cafe/editor.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:04 +0800] "GET /tiny.php HTTP/1.1" 200 - "http://v99win.cafe/tiny.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:04 +0800] "GET /plugin.php HTTP/1.1" 200 - "http://v99win.cafe/plugin.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:05 +0800] "GET /ini.php HTTP/1.1" 200 - "http://v99win.cafe/ini.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:05 +0800] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 200 - "http://v99win.cafe/.well-known/pki-validation/admin.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:06 +0800] "GET /link.php HTTP/1.1" 200 - "http://v99win.cafe/link.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:06 +0800] "GET /wp-content/batm.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/batm.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:07 +0800] "GET /wp-includes/ID3/index.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/ID3/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:08 +0800] "GET /wp-admin/wp-login.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/wp-login.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:08 +0800] "GET /1337.php HTTP/1.1" 200 - "http://v99win.cafe/1337.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:09 +0800] "GET /upgrade.php HTTP/1.1" 200 - "http://v99win.cafe/upgrade.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:09 +0800] "GET /alfa-rex.php HTTP/1.1" 200 - "http://v99win.cafe/alfa-rex.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:10 +0800] "GET /wso.PHP HTTP/1.1" 200 - "http://v99win.cafe/wso.PHP" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:10 +0800] "GET /css.php HTTP/1.1" 200 - "http://v99win.cafe/css.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:11 +0800] "GET /indosec.php HTTP/1.1" 200 - "http://v99win.cafe/indosec.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:12 +0800] "GET /c.php HTTP/1.1" 200 - "http://v99win.cafe/c.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:12 +0800] "GET /wp-includes/Requests/about.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/Requests/about.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:13 +0800] "GET /ws.php HTTP/1.1" 200 - "http://v99win.cafe/ws.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:13 +0800] "GET /alfa-rex.php56 HTTP/1.1" 200 - "http://v99win.cafe/alfa-rex.php56" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:14 +0800] "GET /wp-admin/network/wp-term.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/network/wp-term.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:14 +0800] "GET /wp-admin/maint/upfile.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/maint/upfile.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:15 +0800] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/css/dist/niil.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:15 +0800] "GET /ee.php HTTP/1.1" 200 - "http://v99win.cafe/ee.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:16 +0800] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/themes/travelscape/json.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:17 +0800] "GET /.well-known/pki-validation/about.php HTTP/1.1" 200 - "http://v99win.cafe/.well-known/pki-validation/about.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:17 +0800] "GET /bypass.php HTTP/1.1" 200 - "http://v99win.cafe/bypass.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:18 +0800] "GET /xx.php HTTP/1.1" 200 - "http://v99win.cafe/xx.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:18 +0800] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/SimplePie/plugins.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:19 +0800] "GET /wp-content/content.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/content.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:20 +0800] "GET /lufix.php HTTP/1.1" 200 - "http://v99win.cafe/lufix.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:20 +0800] "GET /wp-includes/wp-class.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/wp-class.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:21 +0800] "GET /.well-known/radio.php HTTP/1.1" 200 - "http://v99win.cafe/.well-known/radio.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:21 +0800] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/js/tinymce/plugins/compat3x/css/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:22 +0800] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 200 - "http://v99win.cafe/.well-known/acme-challenge/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:22 +0800] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/themes/hideo/network.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:23 +0800] "GET /okaoka.php HTTP/1.1" 200 - "http://v99win.cafe/okaoka.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:23 +0800] "GET /hshs.php HTTP/1.1" 200 - "http://v99win.cafe/hshs.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:24 +0800] "GET /data.php HTTP/1.1" 200 - "http://v99win.cafe/data.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:24 +0800] "GET /.well-known/pki-validation/file.php HTTP/1.1" 200 - "http://v99win.cafe/.well-known/pki-validation/file.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:25 +0800] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 200 - "http://v99win.cafe/.well-known/acme-challenge/upfile.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:26 +0800] "GET /w.php HTTP/1.1" 200 - "http://v99win.cafe/w.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:26 +0800] "GET /wp-HbJxZ2.php HTTP/1.1" 200 - "http://v99win.cafe/wp-HbJxZ2.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:27 +0800] "GET /as.php HTTP/1.1" 200 - "http://v99win.cafe/as.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:27 +0800] "GET /wp-cXjq2.php HTTP/1.1" 200 - "http://v99win.cafe/wp-cXjq2.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:28 +0800] "GET /ioxi-rex4.php7 HTTP/1.1" 200 - "http://v99win.cafe/ioxi-rex4.php7" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:28 +0800] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 200 - "http://v99win.cafe/.well-known/acme-challenge/cloud.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:29 +0800] "GET /assets/library.php HTTP/1.1" 200 - "http://v99win.cafe/assets/library.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:30 +0800] "GET /copypaths.php HTTP/1.1" 200 - "http://v99win.cafe/copypaths.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:30 +0800] "GET /fr/priv8.php HTTP/1.1" 200 - "http://v99win.cafe/fr/priv8.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:31 +0800] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/plugins/Core-Econ/upH.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:31 +0800] "GET /menu.php HTTP/1.1" 200 - "http://v99win.cafe/menu.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:32 +0800] "GET /user.php HTTP/1.1" 200 - "http://v99win.cafe/user.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:32 +0800] "GET /small.php HTTP/1.1" 200 - "http://v99win.cafe/small.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:33 +0800] "GET /classwithtostring.php?zet HTTP/1.1" 200 - "http://v99win.cafe/classwithtostring.php?zet" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:33 +0800] "GET /plugins.php HTTP/1.1" 200 - "http://v99win.cafe/plugins.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:34 +0800] "GET /wp-content/plugins/core/include.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/plugins/core/include.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:35 +0800] "GET /version.php HTTP/1.1" 200 - "http://v99win.cafe/version.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:35 +0800] "GET /wp-blog-header.php HTTP/1.1" 200 - "http://v99win.cafe/wp-blog-header.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:36 +0800] "GET /wp-content/plugins/book-form/lndex.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/plugins/book-form/lndex.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:36 +0800] "GET /lv.php HTTP/1.1" 200 - "http://v99win.cafe/lv.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:37 +0800] "GET /wp-admin/images/wp-signup.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/images/wp-signup.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:37 +0800] "GET /mariju.php HTTP/1.1" 200 - "http://v99win.cafe/mariju.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:38 +0800] "GET /assets/dropdown.php HTTP/1.1" 200 - "http://v99win.cafe/assets/dropdown.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:38 +0800] "GET /wp-content/ice.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/ice.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:39 +0800] "GET /h.php HTTP/1.1" 200 - "http://v99win.cafe/h.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:40 +0800] "GET /class.php HTTP/1.1" 200 - "http://v99win.cafe/class.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:40 +0800] "GET /wp-admin/css/ HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/css/" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:41 +0800] "GET /wp-admin/network/MdFvb.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/network/MdFvb.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:41 +0800] "GET /Wordpress/wp-content/ HTTP/1.1" 200 - "http://v99win.cafe/Wordpress/wp-content/" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:42 +0800] "GET /wp-content/themes/extol/settings.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/themes/extol/settings.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:42 +0800] "GET /3m/wp-admin/css/colors/blue/ HTTP/1.1" 200 - "http://v99win.cafe/3m/wp-admin/css/colors/blue/" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:43 +0800] "GET /WSOEnigma.php HTTP/1.1" 200 - "http://v99win.cafe/WSOEnigma.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:43 +0800] "GET /blog/index.php HTTP/1.1" 200 - "http://v99win.cafe/blog/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:44 +0800] "GET /customize.php HTTP/1.1" 200 - "http://v99win.cafe/customize.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:45 +0800] "GET /wp-content/about.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/about.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:45 +0800] "GET /x.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 200 - "http://v99win.cafe/x.php?action=768776e296b6f286f26796e2a72607e2972647" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:46 +0800] "GET /cgi-bin/wp-login.php HTTP/1.1" 200 - "http://v99win.cafe/cgi-bin/wp-login.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:46 +0800] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/pomo/wp-login.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:47 +0800] "GET /wp-includes/js/themes.php HTTP/1.1" 200 - "http://v99win.cafe/wp-includes/js/themes.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:47 +0800] "GET /wp-admin/network/about.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/network/about.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:48 +0800] "GET /index.php HTTP/1.1" 200 - "http://v99win.cafe/index.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:48 +0800] "GET /alfanew.php HTTP/1.1" 200 - "http://v99win.cafe/alfanew.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:49 +0800] "GET /alfa-rex.php7 HTTP/1.1" 200 - "http://v99win.cafe/alfa-rex.php7" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:49 +0800] "GET /alfanew.php7 HTTP/1.1" 200 - "http://v99win.cafe/alfanew.php7" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:50 +0800] "GET /wp-admin/network/radio.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/network/radio.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:51 +0800] "GET /repeater.php HTTP/1.1" 200 - "http://v99win.cafe/repeater.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:51 +0800] "GET /wp-head.php HTTP/1.1" 200 - "http://v99win.cafe/wp-head.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:52 +0800] "GET /wp-content/plugins/mmk/alfanew.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/plugins/mmk/alfanew.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:52 +0800] "GET /wp-admin/network/admin.php HTTP/1.1" 200 - "http://v99win.cafe/wp-admin/network/admin.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:53 +0800] "GET /wp-content/themes/intense/block-css.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/themes/intense/block-css.php" "Go-http-client/2.0" 162.158.107.3 - - [08/Jul/2025:10:24:54 +0800] "GET /wp-content/updates.php HTTP/1.1" 200 - "http://v99win.cafe/wp-content/updates.php" "Go-http-client/2.0" 172.69.150.82 - - [08/Jul/2025:10:34:09 +0800] "GET /wp-content/plugins/cve-2024-46188/views/viewsecurity.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 172.71.148.170 - - [08/Jul/2025:10:34:11 +0800] "GET /wp-json/custom/v1/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 162.158.26.116 - - [08/Jul/2025:10:35:30 +0800] "GET / HTTP/1.1" 200 - "http://v99win.cafe" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36" 162.158.26.117 - - [08/Jul/2025:10:35:30 +0800] "GET / HTTP/1.1" 200 - "http://v99.cam" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36" 162.158.26.116 - - [08/Jul/2025:10:35:31 +0800] "GET / HTTP/1.1" 200 117265 "http://v99win.cafe" "Mozilla/5.0+(compatible;+Googlebot/2.1;++http://www.google.com/bot.html)" 162.158.26.117 - - [08/Jul/2025:10:35:31 +0800] "GET / HTTP/1.1" 200 117265 "http://v99.cam" "Mozilla/5.0+(compatible;+Googlebot/2.1;++http://www.google.com/bot.html)" 172.68.225.176 - - [08/Jul/2025:10:36:12 +0800] "GET /wp-22.php?map.xml HTTP/1.1" 200 162228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 104.23.175.205 - - [08/Jul/2025:10:40:54 +0800] "GET /.well-known/acme-challenge/AI_LP1HTPH00_7XUV4RZ7_NINVEEY8KK HTTP/1.1" 200 - "-" "Cpanel-HTTP-Client/1.0" 172.71.124.125 - - [08/Jul/2025:10:40:55 +0800] "GET /.well-known/acme-challenge/B6VYOUM-8KTFURB0JP6LR9AANMEKUGVR HTTP/1.1" 200 - "-" "Cpanel-HTTP-Client/1.0" 141.101.76.77 - - [08/Jul/2025:10:41:17 +0800] "GET / HTTP/1.1" 200 - "https://V99WIN.CAFE" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 172.71.183.101 - - [08/Jul/2025:10:44:14 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "https://verifyclick.info" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:125.0.1) Gecko/20100101 Firefox/125.0.1" 104.23.176.11 - - [08/Jul/2025:10:45:16 +0800] "GET /wp-adriv/7c4a2ed546.php HTTP/1.1" 200 82 "https://verifyclick.info/wp-adriv/7c4a2ed546.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.43" 172.68.89.140 - - [08/Jul/2025:10:46:03 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.136 - - [08/Jul/2025:10:46:16 +0800] "GET /favicon.ico HTTP/1.1" 200 - "https://verifyclick.info/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.141 - - [08/Jul/2025:10:46:29 +0800] "GET /wp-log.php HTTP/1.1" 200 895 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.234.44 - - [08/Jul/2025:10:55:44 +0800] "GET /iz HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.234.45 - - [08/Jul/2025:10:55:51 +0800] "GET /iz/gesperrt HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.234.45 - - [08/Jul/2025:10:56:02 +0800] "GET /iz/gesperrt/DE HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.234.45 - - [08/Jul/2025:10:56:07 +0800] "GET /iz/gesperrt/DE/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.234.44 - - [08/Jul/2025:10:56:22 +0800] "GET /iz/gesperrt/DE/anm.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.234.44 - - [08/Jul/2025:10:56:32 +0800] "GET /%20iz/gesperrt/DE/anm.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.234.44 - - [08/Jul/2025:10:56:32 +0800] "GET /%20iz/gesperrt/DE/index.php HTTP/1.1" 200 5740 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.190 - - [08/Jul/2025:10:56:33 +0800] "GET /%20iz/gesperrt/DE/signin.js HTTP/1.1" 200 7380 "https://verifyclick.info/%20iz/gesperrt/DE/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.234.181 - - [08/Jul/2025:10:56:33 +0800] "GET /%20iz/gesperrt/DE/js/jq.css HTTP/1.1" 200 795 "https://verifyclick.info/%20iz/gesperrt/DE/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.171 - - [08/Jul/2025:10:56:33 +0800] "GET /%20iz/gesperrt/DE/js/jquery.min.js HTTP/1.1" 200 99334 "https://verifyclick.info/%20iz/gesperrt/DE/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.78 - - [08/Jul/2025:10:56:33 +0800] "GET /%20iz/gesperrt/DE/sample.css HTTP/1.1" 200 2153 "https://verifyclick.info/%20iz/gesperrt/DE/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.206 - - [08/Jul/2025:10:56:33 +0800] "GET /%20iz/gesperrt/DE/js/jquery-ui.min.js HTTP/1.1" 200 243007 "https://verifyclick.info/%20iz/gesperrt/DE/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.136 - - [08/Jul/2025:10:56:33 +0800] "GET /%20iz/gesperrt/DE/b.css HTTP/1.1" 200 - "https://verifyclick.info/%20iz/gesperrt/DE/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 162.158.22.46 - - [08/Jul/2025:10:56:35 +0800] "GET /%20iz/gesperrt/DE/images/cptcha.png HTTP/1.1" 200 20286 "https://verifyclick.info/%20iz/gesperrt/DE/js/jq.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.73 - - [08/Jul/2025:10:56:35 +0800] "GET /%20iz/gesperrt/DE/images/favicon.ico HTTP/1.1" 200 17542 "https://verifyclick.info/%20iz/gesperrt/DE/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.234.45 - - [08/Jul/2025:10:56:42 +0800] "GET /%20iz/gesperrt/DE/redirect.php HTTP/1.1" 500 - "https://verifyclick.info/%20iz/gesperrt/DE/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.12 - - [08/Jul/2025:10:57:32 +0800] "GET /Anmelden HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.12 - - [08/Jul/2025:10:57:42 +0800] "GET /a/Anmelden HTTP/1.1" 301 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.19.103 - - [08/Jul/2025:10:57:43 +0800] "POST /xmlrpc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 172.70.108.12 - - [08/Jul/2025:10:57:43 +0800] "GET /a/Anmelden/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.12 - - [08/Jul/2025:10:57:45 +0800] "GET /a/Anmelden/app/ HTTP/1.1" 200 174029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.13 - - [08/Jul/2025:10:57:46 +0800] "GET /personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=css&modalView=login HTTP/1.1" 200 - "https://verifyclick.info/a/Anmelden/app/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.12 - - [08/Jul/2025:10:57:46 +0800] "GET /personalization/cl2/freeform/WebsiteScreen?source=wwwhead&fetchType=js&winw=1600&winh=860&screenw=1546&screenh=740&ratio=1 HTTP/1.1" 200 - "https://verifyclick.info/a/Anmelden/app/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.13 - - [08/Jul/2025:10:57:47 +0800] "GET /personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=js&modalView=login HTTP/1.1" 200 - "https://verifyclick.info/a/Anmelden/app/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.12 - - [08/Jul/2025:10:57:47 +0800] "POST /personalization/log HTTP/1.1" 200 - "https://verifyclick.info/a/Anmelden/app/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.12 - - [08/Jul/2025:10:57:52 +0800] "POST /personalization/cl2 HTTP/1.1" 200 - "https://verifyclick.info/a/Anmelden/app/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.12 - - [08/Jul/2025:10:57:54 +0800] "POST /personalization/cl2 HTTP/1.1" 200 - "https://verifyclick.info/a/Anmelden/app/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.12 - - [08/Jul/2025:10:57:54 +0800] "POST /personalization/cl2 HTTP/1.1" 200 - "https://verifyclick.info/a/Anmelden/app/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.13 - - [08/Jul/2025:10:57:54 +0800] "POST /a/Anmelden/app/rez/send.php7 HTTP/1.1" 302 1 "https://verifyclick.info/a/Anmelden/app/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.12 - - [08/Jul/2025:10:57:56 +0800] "GET /a/Anmelden/app/update7.php HTTP/1.1" 200 - "https://verifyclick.info/a/Anmelden/app/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.231 - - [08/Jul/2025:10:59:17 +0800] "GET /a/amz/DE HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.231 - - [08/Jul/2025:10:59:26 +0800] "GET /a/amz/de HTTP/1.1" 301 309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.231 - - [08/Jul/2025:10:59:26 +0800] "GET /a/amz/de/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.231 - - [08/Jul/2025:10:59:26 +0800] "GET /a/amz/de/21338337f HTTP/1.1" 301 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.231 - - [08/Jul/2025:10:59:26 +0800] "GET /a/amz/de/21338337f/ HTTP/1.1" 200 5740 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 162.158.23.216 - - [08/Jul/2025:10:59:27 +0800] "GET /a/amz/de/21338337f/js/jq.css HTTP/1.1" 200 795 "https://verifyclick.info/a/amz/de/21338337f/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 162.158.22.42 - - [08/Jul/2025:10:59:27 +0800] "GET /a/amz/de/21338337f/js/jquery.min.js HTTP/1.1" 200 93435 "https://verifyclick.info/a/amz/de/21338337f/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.234.210 - - [08/Jul/2025:10:59:27 +0800] "GET /a/amz/de/21338337f/sample.css HTTP/1.1" 200 2153 "https://verifyclick.info/a/amz/de/21338337f/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 162.158.22.31 - - [08/Jul/2025:10:59:27 +0800] "GET /a/amz/de/21338337f/signin.js HTTP/1.1" 200 1481 "https://verifyclick.info/a/amz/de/21338337f/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.234.55 - - [08/Jul/2025:10:59:27 +0800] "GET /a/amz/de/21338337f/js/jquery-ui.min.js HTTP/1.1" 200 237108 "https://verifyclick.info/a/amz/de/21338337f/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.234.92 - - [08/Jul/2025:10:59:27 +0800] "GET /a/amz/de/21338337f/b.css HTTP/1.1" 200 - "https://verifyclick.info/a/amz/de/21338337f/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.87 - - [08/Jul/2025:10:59:29 +0800] "GET /a/amz/de/21338337f/images/cptcha.png HTTP/1.1" 200 20286 "https://verifyclick.info/a/amz/de/21338337f/js/jq.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.193 - - [08/Jul/2025:10:59:29 +0800] "GET /a/amz/de/21338337f/images/favicon.ico HTTP/1.1" 200 17542 "https://verifyclick.info/a/amz/de/21338337f/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.231 - - [08/Jul/2025:10:59:35 +0800] "GET /a/amz/de/21338337f/redirect.php HTTP/1.1" 500 - "https://verifyclick.info/a/amz/de/21338337f/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.138 - - [08/Jul/2025:11:00:45 +0800] "GET /a/ HTTP/1.1" 200 7362 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.138 - - [08/Jul/2025:11:00:59 +0800] "POST /a/ HTTP/1.1" 302 - "https://verifyclick.info/a/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.138 - - [08/Jul/2025:11:01:00 +0800] "GET /a/DE/ HTTP/1.1" 302 - "https://verifyclick.info/a/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.138 - - [08/Jul/2025:11:01:02 +0800] "GET /a/DE/app/ HTTP/1.1" 200 174124 "https://verifyclick.info/a/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.139 - - [08/Jul/2025:11:01:03 +0800] "GET /personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=css&modalView=login HTTP/1.1" 200 - "https://verifyclick.info/a/DE/app/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.138 - - [08/Jul/2025:11:01:04 +0800] "GET /personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=js&modalView=login HTTP/1.1" 200 - "https://verifyclick.info/a/DE/app/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.139 - - [08/Jul/2025:11:01:04 +0800] "GET /personalization/cl2/freeform/WebsiteScreen?source=wwwhead&fetchType=js&winw=1600&winh=860&screenw=1546&screenh=740&ratio=1 HTTP/1.1" 200 - "https://verifyclick.info/a/DE/app/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.139 - - [08/Jul/2025:11:01:05 +0800] "POST /personalization/log HTTP/1.1" 200 - "https://verifyclick.info/a/DE/app/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.138 - - [08/Jul/2025:11:01:09 +0800] "POST /personalization/cl2 HTTP/1.1" 200 - "https://verifyclick.info/a/DE/app/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.138 - - [08/Jul/2025:11:01:13 +0800] "POST /personalization/log HTTP/1.1" 200 - "https://verifyclick.info/a/DE/app/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.139 - - [08/Jul/2025:11:01:41 +0800] "POST /personalization/log HTTP/1.1" 200 - "https://verifyclick.info/a/DE/app/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.138 - - [08/Jul/2025:11:01:53 +0800] "POST /personalization/log HTTP/1.1" 200 - "https://verifyclick.info/a/DE/app/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.139 - - [08/Jul/2025:11:02:07 +0800] "POST /personalization/cl2 HTTP/1.1" 200 - "https://verifyclick.info/a/DE/app/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.138 - - [08/Jul/2025:11:02:07 +0800] "POST /personalization/cl2 HTTP/1.1" 200 - "https://verifyclick.info/a/DE/app/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.138 - - [08/Jul/2025:11:02:07 +0800] "POST /a/DE/app/rez/send.php HTTP/1.1" 302 1 "https://verifyclick.info/a/DE/app/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.139 - - [08/Jul/2025:11:02:10 +0800] "GET /a/DE/app/update.php HTTP/1.1" 200 714689 "https://verifyclick.info/a/DE/app/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.140 - - [08/Jul/2025:11:02:13 +0800] "GET /service-worker.js HTTP/1.1" 200 - "https://verifyclick.info/a/DE/app/update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.138 - - [08/Jul/2025:11:02:15 +0800] "GET /personalization/cl2/freeform/DebugEvent?source=www&type=ServiceWorkerFailure&message=Failed%20to%20register%20a%20ServiceWorker%20for%20scope%20(%27https%3A%2F%2Fverifyclick.info%2F%27)%20with%20script%20(%27https%3A%2F%2Fverifyclick.info%2Fservice-worker.js%27)%3A%20The%20script%20has%20an%20unsupported%20MIME%20type%20(%27text%2Fhtml%27). HTTP/1.1" 200 - "https://verifyclick.info/a/DE/app/update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.138 - - [08/Jul/2025:11:02:20 +0800] "POST /personalization/cl2 HTTP/1.1" 200 - "https://verifyclick.info/a/DE/app/update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.138 - - [08/Jul/2025:11:02:24 +0800] "POST /personalization/cl2 HTTP/1.1" 200 - "https://verifyclick.info/a/DE/app/update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.138 - - [08/Jul/2025:11:02:26 +0800] "GET /personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=css&modalView=signupSimplicity-paymentPicker HTTP/1.1" 200 - "https://verifyclick.info/a/DE/app/info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.139 - - [08/Jul/2025:11:02:25 +0800] "GET /a/DE/app/info.php HTTP/1.1" 200 1054817 "https://verifyclick.info/a/DE/app/update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.146 - - [08/Jul/2025:11:02:27 +0800] "GET /a/DE/app/css/simplicity.c921377fa063e51283b1.css HTTP/1.1" 200 193651 "https://verifyclick.info/a/DE/app/info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.138 - - [08/Jul/2025:11:02:27 +0800] "GET /personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=js&modalView=signupSimplicity-paymentPicker HTTP/1.1" 200 - "https://verifyclick.info/a/DE/app/info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.143 - - [08/Jul/2025:11:02:28 +0800] "GET /a/DE/app/css/java1.js HTTP/1.1" 200 6819 "https://verifyclick.info/a/DE/app/info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.142 - - [08/Jul/2025:11:02:28 +0800] "GET /a/DE/app/css/java2.js HTTP/1.1" 200 709 "https://verifyclick.info/a/DE/app/info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.138 - - [08/Jul/2025:11:02:45 +0800] "POST /a/DE/app/rez/sendinfo.php HTTP/1.1" 302 - "https://verifyclick.info/a/DE/app/info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.138 - - [08/Jul/2025:11:02:47 +0800] "GET /a/DE/app/card.php HTTP/1.1" 200 1054362 "https://verifyclick.info/a/DE/app/info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.139 - - [08/Jul/2025:11:02:48 +0800] "GET /personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=css&modalView=signupSimplicity-paymentPicker HTTP/1.1" 200 - "https://verifyclick.info/a/DE/app/card.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.139 - - [08/Jul/2025:11:02:49 +0800] "GET /personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=js&modalView=signupSimplicity-paymentPicker HTTP/1.1" 200 - "https://verifyclick.info/a/DE/app/card.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.138 - - [08/Jul/2025:11:03:13 +0800] "POST /a/DE/app/rez/sendcard.php HTTP/1.1" 200 483747 "https://verifyclick.info/a/DE/app/card.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.138 - - [08/Jul/2025:11:03:18 +0800] "GET /personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=css&modalView=signupSimplicity-creditOptionMode HTTP/1.1" 200 - "https://verifyclick.info/a/DE/app/rez/sendcard.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.138 - - [08/Jul/2025:11:03:19 +0800] "GET /personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=js&modalView=signupSimplicity-creditOptionMode HTTP/1.1" 200 - "https://verifyclick.info/a/DE/app/rez/sendcard.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.138 - - [08/Jul/2025:11:03:38 +0800] "POST /a/DE/app/rez/sendsms.php HTTP/1.1" 302 204 "https://verifyclick.info/a/DE/app/rez/sendcard.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.138 - - [08/Jul/2025:11:03:42 +0800] "GET /personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=css&modalView=signupSimplicity-planSelectionWithContext HTTP/1.1" 200 - "https://verifyclick.info/a/DE/app/thanks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.138 - - [08/Jul/2025:11:03:41 +0800] "GET /a/DE/app/thanks.php HTTP/1.1" 200 498307 "https://verifyclick.info/a/DE/app/rez/sendcard.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.68.89.138 - - [08/Jul/2025:11:03:43 +0800] "GET /personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=js&modalView=signupSimplicity-planSelectionWithContext HTTP/1.1" 200 - "https://verifyclick.info/a/DE/app/thanks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.92 - - [08/Jul/2025:11:05:59 +0800] "GET /a/DE/app/card.php HTTP/1.1" 200 - "https://verifyclick.info/a/DE/app/info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.92 - - [08/Jul/2025:11:06:01 +0800] "GET /a/DE/app/info.php HTTP/1.1" 200 - "https://verifyclick.info/a/DE/app/update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.92 - - [08/Jul/2025:11:06:03 +0800] "GET /a/DE/app/info.php HTTP/1.1" 200 - "https://verifyclick.info/a/DE/app/update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.92 - - [08/Jul/2025:11:06:07 +0800] "GET /a/DE/app/info.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.108.92 - - [08/Jul/2025:11:06:11 +0800] "GET /a/DE/app/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.70.143.168 - - [08/Jul/2025:11:09:20 +0800] "GET /xmlrpc.php HTTP/1.1" 200 - "http://v99win.cafe/xmlrpc.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 172.71.215.178 - - [08/Jul/2025:11:14:31 +0800] "GET /wp-22.php?map.xml HTTP/1.1" 200 162232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 172.68.89.143 - - [08/Jul/2025:11:15:12 +0800] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 172.71.222.70 - - [08/Jul/2025:11:15:27 +0800] "GET /ads.txt HTTP/1.1" 200 121220 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
Close
