Listing contents using opendir/readdir: ../../../../../../../../../../../../../../../../../../../../../../home/newaesng/access-logs/emenameducationalfoundation.org.newagetechgroup.com-ssl_log
148.113.128.209 - - [16/Jan/2026:07:35:29 -0500] "GET / HTTP/1.1" 200 340 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 170.106.72.178 - - [16/Jan/2026:08:01:38 -0500] "GET / HTTP/1.1" 200 435 "http://www.emenameducationalfoundation.org" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 15.235.27.121 - - [16/Jan/2026:08:33:57 -0500] "GET /programs/medical-outreach HTTP/1.1" 200 340 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 102.89.34.180 - - [16/Jan/2026:09:07:52 -0500] "GET /cpanel HTTP/1.1" 200 13294 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:146.0) Gecko/20100101 Firefox/146.0" 102.89.34.180 - - [16/Jan/2026:09:07:53 -0500] "GET /favicon.ico HTTP/1.1" 404 1251 "https://emenameducationalfoundation.org/cpanel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:146.0) Gecko/20100101 Firefox/146.0" 51.222.95.59 - - [16/Jan/2026:09:24:38 -0500] "GET /volunteer HTTP/1.1" 200 340 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 104.239.64.201 - - [16/Jan/2026:09:45:52 -0500] "GET /hoebkqit HTTP/1.1" 200 435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 104.193.212.133 - - [16/Jan/2026:09:45:52 -0500] "GET /hoebkqit HTTP/1.1" 200 435 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 104.249.48.9 - - [16/Jan/2026:09:45:53 -0500] "GET / HTTP/1.1" 200 435 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:137.0) Gecko/20100101 Firefox/137.0" 82.23.117.111 - - [16/Jan/2026:09:45:53 -0500] "GET /hoebkqit HTTP/1.1" 200 435 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" 104.252.198.250 - - [16/Jan/2026:09:45:53 -0500] "GET / HTTP/1.1" 200 435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 82.26.125.122 - - [16/Jan/2026:09:45:54 -0500] "GET / HTTP/1.1" 200 435 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0" 82.23.117.123 - - [16/Jan/2026:09:45:52 -0500] "GET /sgxuwbde HTTP/1.1" 200 435 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 82.22.163.1 - - [16/Jan/2026:09:45:52 -0500] "GET /sgxuwbde HTTP/1.1" 200 435 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Safari/605.1.15" 104.233.59.95 - - [16/Jan/2026:09:45:52 -0500] "GET /sgxuwbde HTTP/1.1" 200 435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 104.193.213.191 - - [16/Jan/2026:09:45:52 -0500] "GET / HTTP/1.1" 200 435 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15" 166.0.50.29 - - [16/Jan/2026:09:45:52 -0500] "GET / HTTP/1.1" 200 435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 45.39.245.11 - - [16/Jan/2026:09:45:53 -0500] "GET / HTTP/1.1" 200 435 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) obsidian/1.8.9 Chrome/132.0.6834.210 Electron/34.3.0 Safari/537.36" 46.202.42.205 - - [16/Jan/2026:09:45:54 -0500] "GET / HTTP/1.1" 200 435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0" 15.235.96.19 - - [16/Jan/2026:10:03:25 -0500] "GET /programs/coding-camp HTTP/1.1" 200 340 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 2a06:98c0:3600::103 - - [16/Jan/2026:10:08:18 -0500] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 2a06:98c0:3600::103 - - [16/Jan/2026:10:09:03 -0500] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 200 340 "-" "http://emenameducationalfoundation.org/wordpress/wp-admin/setup-config.php" 2a06:98c0:3600::103 - - [16/Jan/2026:10:09:17 -0500] "GET /wp-admin/setup-config.php HTTP/1.1" 200 340 "-" "https://emenameducationalfoundation.org/wp-admin/setup-config.php" 2a06:98c0:3600::103 - - [16/Jan/2026:10:09:36 -0500] "GET /wp-admin/setup-config.php HTTP/1.1" 200 340 "-" "http://emenameducationalfoundation.org/wp-admin/setup-config.php" 91.196.152.226 - - [16/Jan/2026:10:27:37 -0500] "GET / HTTP/1.1" 200 779 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 91.196.152.231 - - [16/Jan/2026:10:34:56 -0500] "GET /favicon.ico HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 51.222.95.243 - - [16/Jan/2026:10:52:34 -0500] "GET /about/tax-exempt HTTP/1.1" 200 340 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 170.106.35.153 - - [16/Jan/2026:11:02:06 -0500] "GET / HTTP/1.1" 200 435 "http://emenameducationalfoundation.org" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 102.89.34.180 - - [16/Jan/2026:11:37:43 -0500] "GET /aba.php HTTP/1.1" 200 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:146.0) Gecko/20100101 Firefox/146.0" 102.89.34.180 - - [16/Jan/2026:11:37:43 -0500] "GET /favicon.ico HTTP/1.1" 404 1251 "https://emenameducationalfoundation.org/aba.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:146.0) Gecko/20100101 Firefox/146.0" 51.254.49.96 - - [16/Jan/2026:11:45:05 -0500] "GET / HTTP/1.1" 200 779 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 102.89.34.180 - - [16/Jan/2026:11:47:30 -0500] "GET /aba.php HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:146.0) Gecko/20100101 Firefox/146.0" 102.89.34.180 - - [16/Jan/2026:11:47:31 -0500] "GET /favicon.ico HTTP/1.1" 404 1251 "https://emenameducationalfoundation.org/aba.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:146.0) Gecko/20100101 Firefox/146.0" 54.39.203.192 - - [16/Jan/2026:12:10:53 -0500] "GET /about/our-story HTTP/1.1" 200 340 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 2a06:98c0:3600::103 - - [16/Jan/2026:14:04:18 -0500] "GET /wp-admin/setup-config.php HTTP/1.1" 200 340 "-" "http://emenameducationalfoundation.org/wp-admin/setup-config.php" 2a06:98c0:3600::103 - - [16/Jan/2026:14:07:16 -0500] "GET /wp-admin/setup-config.php HTTP/1.1" 200 340 "-" "http://emenameducationalfoundation.org/wp-admin/setup-config.php" 2a06:98c0:3600::103 - - [16/Jan/2026:14:06:37 -0500] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 200 340 "-" "http://emenameducationalfoundation.org/wordpress/wp-admin/setup-config.php" 2a06:98c0:3600::103 - - [16/Jan/2026:14:07:11 -0500] "GET /wp-admin/setup-config.php HTTP/1.1" 200 340 "-" "https://emenameducationalfoundation.org/wp-admin/setup-config.php" 2a06:98c0:3600::103 - - [16/Jan/2026:14:07:11 -0500] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 200 340 "-" "https://emenameducationalfoundation.org/wordpress/wp-admin/setup-config.php" 4.214.48.159 - - [16/Jan/2026:15:28:43 -0500] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:43 -0500] "GET /chosen.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:44 -0500] "GET /ds.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:44 -0500] "GET /f5.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:44 -0500] "GET /bolt.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:45 -0500] "GET /file.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:45 -0500] "GET /god4m.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:45 -0500] "GET /info.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:45 -0500] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:45 -0500] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:46 -0500] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:46 -0500] "GET /wp-good.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:46 -0500] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:46 -0500] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:46 -0500] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:46 -0500] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:47 -0500] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:47 -0500] "GET /manager.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:47 -0500] "GET /radio.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:48 -0500] "GET /wp-includes/rest-api/index.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:43 -0500] "GET /abcd.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:43 -0500] "GET /about.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:43 -0500] "GET /default.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:44 -0500] "GET /ioxi-o.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:44 -0500] "GET /deepseek_d.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:44 -0500] "GET /pu9.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:45 -0500] "GET /wp-bat.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:45 -0500] "GET /test1.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:45 -0500] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:46 -0500] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:46 -0500] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:47 -0500] "GET /classwithtostring.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:47 -0500] "GET /autoload_classmap.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:47 -0500] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:47 -0500] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:47 -0500] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:48 -0500] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:48 -0500] "GET /0.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:48 -0500] "GET /07.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:48 -0500] "GET /1.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:48 -0500] "GET /123.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:48 -0500] "GET /aa.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:48 -0500] "GET /admin.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:48 -0500] "GET /akc.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:49 -0500] "GET /akcc.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:49 -0500] "GET /asd.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:49 -0500] "GET /atomlib.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:49 -0500] "GET /axx.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:49 -0500] "GET /build.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:49 -0500] "GET /buy.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:50 -0500] "GET /cong.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:50 -0500] "GET /dropdown.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:50 -0500] "GET /file4.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:50 -0500] "GET /filemanager.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:51 -0500] "GET /flower.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:51 -0500] "GET /makeasmtp.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:51 -0500] "GET /moon.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:51 -0500] "GET /wp-activate.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:52 -0500] "GET /wp-trackback.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:49 -0500] "GET /asasx.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:49 -0500] "GET /berax.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:50 -0500] "GET /checkbox.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:50 -0500] "GET /css.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:50 -0500] "GET /edit.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:50 -0500] "GET /file2.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:51 -0500] "GET /form.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:51 -0500] "GET /kyami.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:51 -0500] "GET /mari.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:51 -0500] "GET /new.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:52 -0500] "GET /wp-admin.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:52 -0500] "GET /adminfuns.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.214.48.159 - - [16/Jan/2026:15:28:52 -0500] "GET /xmrlpc.php HTTP/1.1" 200 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.124.66.79 - - [16/Jan/2026:15:44:16 -0500] "HEAD / HTTP/1.1" 200 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:146.0) Gecko/20100101 Firefox/146.0"