TP/1.1" 301 161 "-" "-" 52.138.31.126 - - [10/May/2026:23:01:52 -0400] "GET /f35.php HTTP/1.1" 301 130 "-" "-" 52.138.31.126 - - [10/May/2026:23:01:52 -0400] "GET //wp-includes/css/index.php?p= HTTP/1.1" 301 151 "-" "-" 52.138.31.126 - - [10/May/2026:23:01:52 -0400] "GET /bal.php HTTP/1.1" 301 130 "-" "-" 52.138.31.126 - - [10/May/2026:23:01:52 -0400] "GET //cgi-bin/admin.php HTTP/1.1" 301 140 "-" "-" 52.138.31.126 - - [10/May/2026:23:01:52 -0400] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 153 "-" "-" 52.138.31.126 - - [10/May/2026:23:01:52 -0400] "GET /gettest.php HTTP/1.1" 301 134 "-" "-" 20.104.97.84 - - [10/May/2026:23:01:52 -0400] "GET /file60.php HTTP/1.1" 302 - "-" "-" 52.138.31.126 - - [10/May/2026:23:01:52 -0400] "GET //wp-content/BypassBest.php HTTP/1.1" 301 148 "-" "-" 20.104.97.84 - - [10/May/2026:23:01:52 -0400] "GET /wp-k7djufwez2.php HTTP/1.1" 302 - "-" "-" 52.138.31.126 - - [10/May/2026:23:01:52 -0400] "GET /wp-content/ HTTP/1.1" 301 134 "-" "-" 52.138.31.126 - - [10/May/2026:23:01:52 -0400] "GET /simple.php HTTP/1.1" 301 133 "-" "-" 20.104.97.84 - - [10/May/2026:23:01:52 -0400] "GET /bc.php HTTP/1.1" 302 - "-" "-" 52.138.31.126 - - [10/May/2026:23:01:53 -0400] "GET /buy.php HTTP/1.1" 301 130 "-" "-" 20.104.97.84 - - [10/May/2026:23:01:53 -0400] "GET /100.php HTTP/1.1" 302 - "-" "-" 52.138.31.126 - - [10/May/2026:23:01:53 -0400] "GET /xxx.php HTTP/1.1" 301 130 "-" "-" 20.104.97.84 - - [10/May/2026:23:01:53 -0400] "GET /xmu.php HTTP/1.1" 302 - "-" "-" 52.138.31.126 - - [10/May/2026:23:01:53 -0400] "GET /hypo.php HTTP/1.1" 301 131 "-" "-" 52.138.31.126 - - [10/May/2026:23:01:53 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 148 "-" "-" 20.104.97.84 - - [10/May/2026:23:01:53 -0400] "GET /bob.php HTTP/1.1" 302 - "-" "-" 52.138.31.126 - - [10/May/2026:23:01:53 -0400] "GET /chosen.php HTTP/1.1" 301 133 "-" "-" 20.104.97.84 - - [10/May/2026:23:01:53 -0400] "GET /av.php HTTP/1.1" 302 - "-" "-" 52.138.31.126 - - [10/May/2026:23:01:53 -0400] "GET //wp-includes/block-bindings/ HTTP/1.1" 301 150 "-" "-" 20.104.97.84 - - [10/May/2026:23:01:53 -0400] "GET /casp1.php HTTP/1.1" 302 - "-" "-" 52.138.31.126 - - [10/May/2026:23:01:53 -0400] "GET /00.php HTTP/1.1" 301 129 "-" "-" 20.104.97.84 - - [10/May/2026:23:01:53 -0400] "GET //file6.php HTTP/1.1" 302 - "-" "-" 52.138.31.126 - - [10/May/2026:23:01:53 -0400] "GET /als.php HTTP/1.1" 301 130 "-" "-" 52.138.31.126 - - [10/May/2026:23:01:54 -0400] "GET /pol.php HTTP/1.1" 301 130 "-" "-" 20.104.97.84 - - [10/May/2026:23:01:54 -0400] "GET /xs.php HTTP/1.1" 302 - "-" "-" 52.138.31.126 - - [10/May/2026:23:01:54 -0400] "GET /ms-amdin.php HTTP/1.1" 301 135 "-" "-" 20.104.97.84 - - [10/May/2026:23:01:54 -0400] "GET /xxa.php HTTP/1.1" 302 - "-" "-" 52.138.31.126 - - [10/May/2026:23:01:54 -0400] "GET /mini-type0.php HTTP/1.1" 301 137 "-" "-" 20.104.97.84 - - [10/May/2026:23:01:54 -0400] "GET /3369.php HTTP/1.1" 302 - "-" "-" 52.138.31.126 - - [10/May/2026:23:01:54 -0400] "GET /wp-optimaized.php HTTP/1.1" 301 140 "-" "-" 20.104.97.84 - - [10/May/2026:23:01:54 -0400] "GET /dostshell.php HTTP/1.1" 302 - "-" "-" 52.138.31.126 - - [10/May/2026:23:01:54 -0400] "GET /bypasbnget.php HTTP/1.1" 301 137 "-" "-" 20.104.97.84 - - [10/May/2026:23:01:54 -0400] "GET /zoper1.php HTTP/1.1" 302 - "-" "-" 52.138.31.126 - - [10/May/2026:23:01:54 -0400] "GET /sfm.php HTTP/1.1" 301 130 "-" "-" 20.104.97.84 - - [10/May/2026:23:01:54 -0400] "GET /77.php HTTP/1.1" 302 - "-" "-" 52.138.31.126 - - [10/May/2026:23:01:54 -0400] "GET /sf.php HTTP/1.1" 301 129 "-" "-" 52.138.31.126 - - [10/May/2026:23:01:54 -0400] "GET /file5.php HTTP/1.1" 301 132 "-" "-" 20.104.97.84 - - [10/May/2026:23:01:54 -0400] "GET /wp-kz.php HTTP/1.1" 302 - "-" "-" 52.138.31.126 - - [10/May/2026:23:01:55 -0400] "GET /fs.php HTTP/1.1" 301 129 "-" "-" 20.104.97.84 - - [10/May/2026:23:01:55 -0400] "GET /file6.php HTTP/1.1" 302 - "-" "-" 52.138.31.126 - - [10/May/2026:23:01:55 -0400] "GET /4PJcpMFsD8B.php HTTP/1.1" 301 138 "-" "-" 20.104.97.84 - - [10/May/2026:23:01:55 -0400] "GET /zogy1.php HTTP/1.1" 302 - "-" "-" 52.138.31.126 - - [10/May/2026:23:01:55 -0400] "GET /lala.php HTTP/1.1" 301 131 "-" "-" 20.104.97.84 - - [10/May/2026:23:01:55 -0400] "GET /19.php HTTP/1.1" 302 - "-" "-" 52.138.31.126 - - [10/May/2026:23:01:55 -0400] "GET /file.php? HTTP/1.1" 301 131 "-" "-" 52.138.31.126 - - [10/May/2026:23:01:55 -0400] "GET /system_log.php HTTP/1.1" 301 137 "-" "-" 20.104.97.84 - - [10/May/2026:23:01:55 -0400] "GET /11.php HTTP/1.1" 302 - "-" "-" 52.138.31.126 - - [10/May/2026:23:01:55 -0400] "GET /class.1.php HTTP/1.1" 301 134 "-" "-" 52.138.31.126 - - [10/May/2026:23:01:55 -0400] "GET /wp-gr.php HTTP/1.1" 301 132 "-" "-" 52.138.31.126 - - [10/May/2026:23:01:55 -0400] "GET /cfile.php HTTP/1.1" 301 132 "-" "-" 52.138.31.126 - - [10/May/2026:23:01:56 -0400] "GET /class-wp.php HTTP/1.1" 301 135 "-" "-" 52.138.31.126 - - [10/May/2026:23:01:56 -0400] "GET /ff2.php HTTP/1.1" 301 130 "-" "-" 52.138.31.126 - - [10/May/2026:23:01:56 -0400] "GET /aa2.php HTTP/1.1" 301 130 "-" "-" 52.138.31.126 - - [10/May/2026:23:01:56 -0400] "GET /tox.php HTTP/1.1" 301 130 "-" "-" 20.104.97.84 - - [10/May/2026:23:01:56 -0400] "GET /w.php HTTP/1.1" 302 - "-" "-" 52.138.31.126 - - [10/May/2026:23:01:56 -0400] "GET /bless5.php HTTP/1.1" 301 133 "-" "-" 52.138.31.126 - - [10/May/2026:23:01:56 -0400] "GET /blex.php HTTP/1.1" 301 131 "-" "-" 52.138.31.126 - - [10/May/2026:23:01:56 -0400] "GET /133.php HTTP/1.1" 301 130 "-" "-" 52.138.31