| Server IP : 23.111.136.34 / Your IP : 216.73.216.136 Web Server : Apache System : Linux servidor.eurohost.com.br 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64 User : meusitei ( 1072) PHP Version : 5.6.40 Disable Function : show_source, system, shell_exec, passthru, proc_open MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/meusitei/access-logs/ |
Upload File : |
178.128.16.229 - - [04/Dec/2025:21:34:59 -0300] "GET /radio.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:35:00 -0300] "GET /content.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:35:03 -0300] "GET /wp-admin/shapes.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:35:08 -0300] "GET /XxX.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:35:09 -0300] "GET /Marvins.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:35:15 -0300] "GET /wp-includes/css/modules.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:35:16 -0300] "GET /olux.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:35:22 -0300] "GET /indoxploit.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:35:25 -0300] "GET /wso.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:35:28 -0300] "GET /upload.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:35:29 -0300] "GET /shell.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:35:30 -0300] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:35:32 -0300] "GET /uploader.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:35:34 -0300] "GET /1337.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:35:35 -0300] "GET /user.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:35:37 -0300] "GET /wp-info.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:35:45 -0300] "GET /wxo.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:35:46 -0300] "GET /amigo.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:35:48 -0300] "GET /yoi.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:35:52 -0300] "GET /wp-admin/codeboy1877_up.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:35:53 -0300] "GET /wp-includes/codeboy1877_up.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:35:57 -0300] "GET /wp-contentt.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:35:59 -0300] "GET /i3wfj.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:36:01 -0300] "GET /5fesj.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:36:03 -0300] "GET /s46v1.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:36:04 -0300] "GET /djfksr4.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:36:05 -0300] "GET /p7m94.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:36:06 -0300] "GET /we1y8.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:36:12 -0300] "GET /jdimzmtaas.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:36:15 -0300] "GET /wp-content/iu.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:36:22 -0300] "GET /ccx/th3_err0r.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:36:27 -0300] "GET /ccx/index.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:36:30 -0300] "GET /cgi-bin/ffAA531.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:36:35 -0300] "GET /cgi-bin/991176.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:36:38 -0300] "GET /991176.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:36:39 -0300] "GET /wp-content/codeboy1877_up.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:36:41 -0300] "GET /hehe.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:36:41 -0300] "GET /post-data.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:36:43 -0300] "GET /w0.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:36:44 -0300] "GET /old-index.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:36:46 -0300] "GET /wsanon.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:36:49 -0300] "GET /wp-content/small.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:36:53 -0300] "GET /wp-content/mode.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:36:54 -0300] "GET /doc.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:36:56 -0300] "GET /indo.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:36:57 -0300] "GET /beence.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:37:00 -0300] "GET /indosec.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:37:03 -0300] "GET /archives.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:37:04 -0300] "GET /po8sa.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:37:08 -0300] "GET /thesmartestx.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:37:10 -0300] "GET /zcanp.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:37:13 -0300] "GET /burjuva.aspx HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:37:16 -0300] "GET /pvt.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:37:19 -0300] "GET /shell20211028.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:37:21 -0300] "GET /cgi-bin/wp-2019.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:37:22 -0300] "GET /crypted.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:37:23 -0300] "GET /h0110w4y.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:37:28 -0300] "GET /vesiw.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:37:33 -0300] "GET /w.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:37:42 -0300] "GET /wp-db.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:37:43 -0300] "GET /wp-includes/lx.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:37:45 -0300] "GET /wp-content/ice.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:37:49 -0300] "GET /wp-content/lx.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:37:53 -0300] "GET /lx.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:38:00 -0300] "GET /tonant.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:38:02 -0300] "GET /f0x.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:38:04 -0300] "GET /config.bak.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:38:10 -0300] "GET /bypass403.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:38:11 -0300] "GET /css.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:38:14 -0300] "GET /adminer.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:38:18 -0300] "GET /allahnaber.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:38:19 -0300] "GET /AK-74.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:38:23 -0300] "GET /alfa3.php/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:38:24 -0300] "GET /alfaindex.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:38:25 -0300] "GET /alfa.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:38:28 -0300] "GET /b374k.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:38:32 -0300] "GET /bypass.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:38:34 -0300] "GET /c99.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:38:39 -0300] "GET /cmd.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:38:41 -0300] "GET /cw.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:38:42 -0300] "GET /date.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:38:44 -0300] "GET /fw.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:38:47 -0300] "GET /haxor.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:38:49 -0300] "GET /icomsium.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:38:51 -0300] "GET /ico.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:38:51 -0300] "GET /leaf.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:38:52 -0300] "GET /marijuana.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:38:56 -0300] "GET /mass.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:38:59 -0300] "GET /mini.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:39:00 -0300] "GET /priv8.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:39:01 -0300] "GET /pws.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:39:04 -0300] "GET /r57.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:39:05 -0300] "GET /robots.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:39:06 -0300] "GET /snd.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:39:07 -0300] "GET /wp-class.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:39:12 -0300] "GET /new-index.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:39:13 -0300] "GET /wp-content/batm.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:39:15 -0300] "GET /wp-content/masshp.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:39:16 -0300] "GET /wp-content/alfa.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:39:22 -0300] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:39:30 -0300] "GET /alfacgiapi/perl.alfa HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:39:34 -0300] "GET /ALFA_DATA/alfacgiapi/alfa.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:39:38 -0300] "GET /ALFA_DATA/alfacgiapi/c99.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:39:41 -0300] "GET /ALFA_DATA/alfacgiapi/fw.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:39:43 -0300] "GET /ALFA_DATA/alfacgiapi/mini.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:39:44 -0300] "GET /ALFA_DATA/alfacgiapi/r57.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:39:49 -0300] "GET /ALFA_DATA/alfacgiapi/uploader.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:39:50 -0300] "GET /ALFA_DATA/alfacgiapi/ups.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:39:52 -0300] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:39:56 -0300] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:39:59 -0300] "GET /wp-content/think.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:40:03 -0300] "GET /wp-content/plugins/upspy/con.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:40:05 -0300] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:40:12 -0300] "GET /wp-content/plugins/upspy/sllolx.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:40:17 -0300] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:40:19 -0300] "GET /wp-content/plugins/html404/cry.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:40:22 -0300] "GET /wp-includes/css/F0x.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:40:27 -0300] "GET /wp-content/uploads/F0x.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:40:30 -0300] "GET /class-wp-widget-archives.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:40:31 -0300] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:40:33 -0300] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:40:36 -0300] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:40:43 -0300] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:40:46 -0300] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:40:50 -0300] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:40:54 -0300] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:40:54 -0300] "GET /xt/index.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:40:55 -0300] "GET /xleet-shell.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:41:00 -0300] "GET /xleet.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:41:01 -0300] "GET /xleetshell.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:41:05 -0300] "GET /wp-admin/includes/xleet-shell.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:41:10 -0300] "GET /wp-content/plugins/content-management/content.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:41:16 -0300] "GET /xlt.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:41:20 -0300] "GET /wp-content/plugins/xt/index.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:41:23 -0300] "GET /wp-content/xleet.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:41:24 -0300] "GET /wp-admin/xleet-shell.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:41:31 -0300] "GET /simple.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:41:32 -0300] "GET /chosen.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:41:35 -0300] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:41:39 -0300] "GET /wp-content/plugins/core/include.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:41:40 -0300] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:41:41 -0300] "GET /nf_tracking.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:41:44 -0300] "GET /class.api.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:41:49 -0300] "GET /xl2023.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:41:53 -0300] "GET /themes.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:41:55 -0300] "GET /wp-head.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:41:56 -0300] "GET /wp-pano.php/repeater.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:41:58 -0300] "GET /admin.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:42:02 -0300] "GET /about.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:42:07 -0300] "GET /wp-2019.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:42:08 -0300] "GET /atomlib.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:42:10 -0300] "GET /css.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:42:11 -0300] "GET /simple.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:42:21 -0300] "GET /log.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:42:22 -0300] "GET /index.php HTTP/1.1" 200 11895 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:42:24 -0300] "GET /mail.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:42:25 -0300] "GET /lufix.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:42:29 -0300] "GET /doc.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:42:30 -0300] "GET /bak.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:42:30 -0300] "GET /content.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:42:32 -0300] "GET /upfile.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:42:37 -0300] "GET /wp.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:42:40 -0300] "GET /wp-conflg.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:42:42 -0300] "GET /bypass.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:42:44 -0300] "GET /wp-activate.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:42:49 -0300] "GET /404.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:42:56 -0300] "GET /updates.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:42:58 -0300] "GET /radio.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:42:59 -0300] "GET /plugins.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:43:01 -0300] "GET /xmrlpc.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:43:05 -0300] "GET /ae.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:43:07 -0300] "GET /moon.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:43:10 -0300] "GET /blog.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:43:14 -0300] "GET /themes.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:43:15 -0300] "GET /ini.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:43:15 -0300] "GET /as.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:43:18 -0300] "GET /shell.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:43:20 -0300] "GET /ws.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:43:20 -0300] "GET /dropdown.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:43:21 -0300] "GET /makeasmtp.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:43:24 -0300] "GET /wp-sigunq.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:43:26 -0300] "GET /wso112233.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:43:28 -0300] "GET /wp-atom.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:43:30 -0300] "GET /alfanew.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:43:34 -0300] "GET /fw.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:43:36 -0300] "GET /install.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:21:43:38 -0300] "GET /wp-login.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:52:01 -0300] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:52:09 -0300] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:52:20 -0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:52:27 -0300] "GET /wp-content/plugins/instabuilder2/cache/up.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:52:30 -0300] "GET /index.php?3x=3x HTTP/1.1" 200 11895 "-" "python-requests/2.31.0" 178.128.16.229 - - [04/Dec/2025:22:52:32 -0300] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:52:43 -0300] "GET /shell20211028.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:52:53 -0300] "GET /wp-includes/shell20211028.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:52:57 -0300] "GET /wp-admin/shell20211028.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:53:11 -0300] "GET /wp-content/shell20211028.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:53:14 -0300] "GET /wp-content/plugins/instabuilder2/cache/plugins/moon.php HTTP/1.1" 200 8460 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:53:31 -0300] "GET /radio.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:53:40 -0300] "GET /shell.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:53:42 -0300] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:53:51 -0300] "GET /ccx/index.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:53:56 -0300] "GET /wp-content/themes/ccx/index.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:54:03 -0300] "GET /wp-content/index.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:54:05 -0300] "GET /wp-info.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:54:13 -0300] "GET /wp-includes/pomo/newup.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:54:17 -0300] "GET /wp-includes/wp-class.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:54:19 -0300] "GET /404.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:54:22 -0300] "GET /406.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:54:30 -0300] "GET /wp-class.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:54:32 -0300] "GET /1index.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:54:42 -0300] "GET /2index.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:54:48 -0300] "GET /3index.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:54:49 -0300] "GET /4index.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:54:59 -0300] "GET /5index.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:55:06 -0300] "GET /6index.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:55:08 -0300] "GET /new-index.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:55:13 -0300] "GET /wikindex.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:55:15 -0300] "GET /old-index.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:55:27 -0300] "GET /wp-blog.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:55:34 -0300] "GET /data.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:55:41 -0300] "GET /wp-includes/embed-wp.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:55:43 -0300] "GET /fw.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:55:45 -0300] "GET /x.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:55:54 -0300] "GET /c.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:55:57 -0300] "GET /a.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:56:00 -0300] "GET /css.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:56:05 -0300] "GET /wp-content/fw.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:56:07 -0300] "GET /wp-admin/fw.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:56:23 -0300] "GET /gank.php.PhP HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:56:34 -0300] "GET /doc.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:56:42 -0300] "GET /.Wp-back.phP HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:56:44 -0300] "GET /wso112233.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:56:47 -0300] "GET /wp-admin/wso.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:56:52 -0300] "GET /wp-content/wso.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:56:55 -0300] "GET /wp-includes/wso.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:57:00 -0300] "GET /wp-admin/includes/logs.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:57:05 -0300] "GET /wp-includes/pomo/treame.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:57:08 -0300] "GET /wp-includes/ID3/vp.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:57:13 -0300] "GET /.well-known/acme-challenge/Alfa.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:57:19 -0300] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:57:27 -0300] "GET /mt/pekok.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:57:30 -0300] "GET /wp-includes/widgets/class-wp-widget-index.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:57:32 -0300] "GET /wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php HTTP/1.1" 200 8460 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:57:37 -0300] "GET /wp-admin/alfa.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:57:40 -0300] "GET /edit-form.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:57:47 -0300] "GET /wp-content/uploads/wp-logout.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:57:51 -0300] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:57:53 -0300] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:57:56 -0300] "GET /wp-content/uploads/ac_assets/IndoSec.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:57:59 -0300] "GET /wp-content/themes/classic/inc/index.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:58:01 -0300] "GET /403.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:58:03 -0300] "GET /wp-content/406.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:58:06 -0300] "GET /wp-admin/406.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:58:10 -0300] "GET /wp-content/plugins/core-stab/index.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:58:15 -0300] "GET /wp-admin/wso112233.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:58:18 -0300] "GET /wp-content/wso112233.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:58:25 -0300] "GET /wp-includes/wso112233.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:58:29 -0300] "GET /xl2023.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:58:35 -0300] "GET /wp-includes/xl2023.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:58:38 -0300] "GET /wp-content/xl2023.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:58:46 -0300] "GET /wp-admin/xl2023.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:58:54 -0300] "GET /wsoyanzorng.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:59:01 -0300] "GET /wp-admin/x.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:59:04 -0300] "GET /wp-admin/x.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:59:07 -0300] "GET /wp-admin/x.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:59:10 -0300] "GET /webadmin/about.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:59:16 -0300] "GET /wp-content/themes/mero-magazine/ws.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:59:19 -0300] "GET /wp-admin/images.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:59:22 -0300] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:59:24 -0300] "GET /locales.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:59:28 -0300] "GET /wp-content/xxx/xxx-xxx/xxxx-xx-xx/pages/xxxxxx.php HTTP/1.1" 200 8460 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:59:34 -0300] "GET /wp-includes/atom.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:59:39 -0300] "GET /about.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:59:52 -0300] "GET /upload.php?mr=exe3 HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:22:59:57 -0300] "GET /mini.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:23:00:10 -0300] "GET /up.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:23:00:12 -0300] "GET /wp-22.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:23:00:16 -0300] "GET /wp.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:23:00:19 -0300] "GET /lock360.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.128.16.229 - - [04/Dec/2025:23:00:20 -0300] "GET /1.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"