198.252.107.178 - - [20/Sep/2026:17:55:20 +0700] "POST /wp-cron.php?doing_wp_cron=1789901719.8761980533599853515625 HTTP/1.1" 200 - "-" "WordPress/7.1.1; https://atena46a.co"
104.23.223.127 - - [20/Sep/2026:17:55:15 +0700] "GET /wp-admin/install.php?step=1 HTTP/1.1" 200 1348 "-" "http://atena46a.co/wp-admin/install.php?step=1"
52.87.69.80 - - [20/Sep/2026:19:24:21 +0700] "GET / HTTP/1.1" 301 - "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.3; Trident/7.0; .NET4.0E; .NET4.0C)"
198.252.107.178 - - [20/Sep/2026:19:30:44 +0700] "POST /wp-cron.php?doing_wp_cron=1789907444.9070749282836914062500 HTTP/1.1" 200 - "-" "WordPress/7.1.1; https://atena46a.co"
45.84.107.55 - - [20/Sep/2026:19:30:43 +0700] "POST /xmlrpc.php HTTP/1.1" 200 178 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
45.84.107.55 - - [20/Sep/2026:19:30:48 +0700] "POST /xmlrpc.php HTTP/1.1" 200 14934 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
172.68.183.81 - - [20/Sep/2026:19:47:48 +0700] "GET /wp-admin/install.php?step=1 HTTP/1.1" 200 1348 "-" "http://atena46a.co/wp-admin/install.php?step=1"
198.252.107.178 - - [20/Sep/2026:19:48:18 +0700] "GET /.well-known/acme-challenge/9GR9TQ71TXL8TZGZMARH2FWMFOI4ETAQ HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0"
198.252.107.178 - - [20/Sep/2026:19:48:24 +0700] "GET /.well-known/acme-challenge/M1GVP-BP36G7COCO6DZDGP2B1UED3AZC HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0"
198.252.107.178 - - [20/Sep/2026:21:44:08 +0700] "POST /wp-cron.php?doing_wp_cron=1789915448.1835579872131347656250 HTTP/1.1" 200 - "-" "WordPress/7.1.1; https://atena46a.co"
104.23.217.129 - - [20/Sep/2026:21:44:07 +0700] "GET /wp-admin/install.php?step=1 HTTP/1.1" 200 1348 "-" "http://atena46a.co/wp-admin/install.php?step=1"
62.60.130.232 - - [20/Sep/2026:22:13:42 +0700] "GET /filefuns.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
62.60.130.232 - - [20/Sep/2026:22:13:58 +0700] "GET /txets.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
62.60.130.232 - - [20/Sep/2026:22:14:06 +0700] "GET /postnews.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
198.252.107.178 - - [20/Sep/2026:22:48:32 +0700] "GET /.well-known/acme-challenge/EGGRIQPP4GZ4PSIE__12NC235ZPN5CFT HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0"
198.252.107.178 - - [20/Sep/2026:22:48:38 +0700] "GET /.well-known/acme-challenge/GLVWW5DQKKDSB4CKQGHIJAM0FWFXU1IB HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0"
104.23.221.188 - - [20/Sep/2026:23:36:32 +0700] "GET /wp-admin/install.php?step=1 HTTP/1.1" 500 3173 "-" "http://atena46a.co/wp-admin/install.php?step=1"
198.252.107.178 - - [20/Sep/2026:23:38:28 +0700] "POST /wp-cron.php?doing_wp_cron=1789922308.4718689918518066406250 HTTP/1.1" 200 - "-" "WordPress/7.1.1; https://atena46a.co"
162.158.193.171 - - [20/Sep/2026:23:38:27 +0700] "GET /wp-admin/install.php?step=1 HTTP/1.1" 200 1348 "-" "http://atena46a.co/wp-admin/install.php?step=1"
107.150.104.176 - - [21/Sep/2026:00:01:33 +0700] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
107.150.104.176 - - [21/Sep/2026:00:01:41 +0700] "GET /favicon.ico HTTP/1.1" 302 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
107.150.104.176 - - [21/Sep/2026:00:01:47 +0700] "GET /robots.txt HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
107.150.104.176 - - [21/Sep/2026:00:01:50 +0700] "GET /robots.txt HTTP/1.1" 200 169 "http://www.atena46a.co/robots.txt" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
107.150.104.176 - - [21/Sep/2026:00:01:54 +0700] "GET /sitemap.xml HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
82.102.18.190 - - [21/Sep/2026:00:29:00 +0700] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
198.252.107.178 - - [21/Sep/2026:00:45:23 +0700] "POST /wp-cron.php?doing_wp_cron=1789926323.3563780784606933593750 HTTP/1.1" 200 - "-" "WordPress/7.1.1; https://atena46a.co"
172.68.243.22 - - [21/Sep/2026:00:45:22 +0700] "GET /wp-admin/install.php?step=1 HTTP/1.1" 200 1348 "-" "http://atena46a.co/wp-admin/install.php?step=1"
199.244.88.229 - - [21/Sep/2026:00:52:42 +0700] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
198.252.107.178 - - [21/Sep/2026:01:48:18 +0700] "GET /.well-known/acme-challenge/L64X896A17Q-5BMS4K6H1V9A488572NG HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0"
198.252.107.178 - - [21/Sep/2026:01:48:25 +0700] "GET /.well-known/acme-challenge/_6APU6WR0-L9IWCCHEY2ASV2DECWI4TT HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0"
198.252.107.178 - - [21/Sep/2026:02:42:17 +0700] "POST /wp-cron.php?doing_wp_cron=1789933337.5483169555664062500000 HTTP/1.1" 200 - "-" "WordPress/7.1.1; https://atena46a.co"
104.23.223.126 - - [21/Sep/2026:02:42:16 +0700] "GET /wp-admin/install.php?step=1 HTTP/1.1" 200 1348 "-" "http://atena46a.co/wp-admin/install.php?step=1"
104.23.223.126 - - [21/Sep/2026:04:32:41 +0700] "GET /wp-admin/install.php?step=1 HTTP/1.1" 200 1348 "-" "http://atena46a.co/wp-admin/install.php?step=1"
198.252.107.178 - - [21/Sep/2026:05:01:43 +0700] "GET /.well-known/acme-challenge/CDAJLKELKD0DIAI3WSDR6TGTUP0YDM-M HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0"
198.252.107.178 - - [21/Sep/2026:05:01:45 +0700] "GET /.well-known/acme-challenge/W3MGH2_BQS2C9MY5C6_EHY0R9TZ79RBQ HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0"
136.117.94.60 - - [21/Sep/2026:05:53:47 +0700] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
104.23.217.128 - - [21/Sep/2026:06:25:29 +0700] "GET /wp-admin/install.php?step=1 HTTP/1.1" 200 1348 "-" "http://atena46a.co/wp-admin/install.php?step=1"
2.57.122.202 - - [21/Sep/2026:06:50:15 +0700] "GET /credentials/store/system/domain/_/api/json?depth=2 HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; SecurityResearch/1.0)"
198.252.107.178 - - [21/Sep/2026:06:50:21 +0700] "POST /wp-cron.php?doing_wp_cron=1789948220.3349900245666503906250 HTTP/1.1" 200 - "-" "WordPress/7.1.1; https://atena46a.co"
198.252.107.178 - - [21/Sep/2026:07:54:49 +0700] "GET /.well-known/acme-challenge/EDTM0VL2MRO3J6U0PTP6NF7P91H46PES HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0"
198.252.107.178 - - [21/Sep/2026:07:54:52 +0700] "GET /.well-known/acme-challenge/FXJ_LLMH62LZCJV4-QF1F0KOEJFDPXHF HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0"
172.71.178.32 - - [21/Sep/2026:08:16:38 +0700] "GET /wp-admin/install.php?step=1 HTTP/1.1" 200 1348 "-" "http://atena46a.co/wp-admin/install.php?step=1"
2.57.122.202 - - [21/Sep/2026:08:47:46 +0700] "GET /actuator/env HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; SecurityResearch/1.0)"
38.127.61.169 - - [21/Sep/2026:08:59:05 +0700] "GET / HTTP/1.1" 500 2482 "-" "python-requests/2.34.2"
104.164.6.216 - - [21/Sep/2026:09:26:34 +0700] "GET / HTTP/1.1" 200 56002 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
104.23.217.129 - - [21/Sep/2026:10:08:21 +0700] "GET /wp-admin/install.php?step=1 HTTP/1.1" 200 180691 "-" "http://atena46a.co/wp-admin/install.php?step=1"
34.158.146.68 - - [21/Sep/2026:10:13:32 +0700] "GET /uploads/.codex/auth.json HTTP/1.1" 200 56002 "-" "crusader-worker/1.0"
172.120.9.36 - - [21/Sep/2026:10:29:33 +0700] "GET / HTTP/1.1" 200 56002 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
198.252.107.178 - - [21/Sep/2026:10:48:25 +0700] "GET /.well-known/acme-challenge/-FK_698D3ZV31XKA1D8FIZP31M264MOH HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0"
198.252.107.178 - - [21/Sep/2026:10:48:35 +0700] "GET /.well-known/acme-challenge/B4WN_ZB-W3F4FKHDZZ1TRCH92QSN7G1E HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0"
213.209.159.84 - - [21/Sep/2026:11:02:35 +0700] "GET / HTTP/1.1" 200 56002 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:02:44 +0700] "GET /?path=/ HTTP/1.1" 200 45476 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:02:45 +0700] "GET /?path=/home/msgdhg02 HTTP/1.1" 200 85567 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:02:47 +0700] "GET /?path=/home/msgdhg02/public_html HTTP/1.1" 200 233889 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:02:49 +0700] "GET /?path=/home/msgdhg02/public_html/atena46a.co/cgi-bin HTTP/1.1" 200 15440 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:02:49 +0700] "GET /?fileloc=/home/msgdhg02/public_html/atena46a.co/license.txt&path=/home/msgdhg02/public_html/atena46a.co HTTP/1.1" 200 33423 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:02:50 +0700] "GET /?path=/home HTTP/1.1" 200 13578 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:02:50 +0700] "GET /?fileloc=/home/msgdhg02/public_html/atena46a.co/readme.html&path=/home/msgdhg02/public_html/atena46a.co HTTP/1.1" 200 22648 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:02:51 +0700] "GET /?fileloc=/home/msgdhg02/public_html/atena46a.co/.htaccess&path=/home/msgdhg02/public_html/atena46a.co HTTP/1.1" 200 14563 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:02:52 +0700] "GET /?path=/home/msgdhg02/public_html/atena46a.co HTTP/1.1" 200 56002 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:02:52 +0700] "GET /?fileloc=/home/msgdhg02/public_html/atena46a.co/wp-config.php&path=/home/msgdhg02/public_html/atena46a.co HTTP/1.1" 200 18255 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:02:52 +0700] "GET /?fileloc=/home/msgdhg02/public_html/atena46a.co/wp-cron.php&path=/home/msgdhg02/public_html/atena46a.co HTTP/1.1" 200 19303 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:02:53 +0700] "GET /?fileloc=/home/msgdhg02/public_html/atena46a.co/index.php&path=/home/msgdhg02/public_html/atena46a.co HTTP/1.1" 200 13772 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:02:53 +0700] "GET /?fileloc=/home/msgdhg02/public_html/atena46a.co/wp-login.php&path=/home/msgdhg02/public_html/atena46a.co HTTP/1.1" 200 77133 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:02:54 +0700] "GET /?fileloc=/home/msgdhg02/public_html/atena46a.co/wp-trackback.php&path=/home/msgdhg02/public_html/atena46a.co HTTP/1.1" 200 19618 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:02:55 +0700] "GET /?fileloc=/home/msgdhg02/public_html/atena46a.co/xcxcrkcbc.php&path=/home/msgdhg02/public_html/atena46a.co HTTP/1.1" 200 17062 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:02:57 +0700] "GET /?fileloc=/home/msgdhg02/public_html/atena46a.co/wp-signup.php&path=/home/msgdhg02/public_html/atena46a.co HTTP/1.1" 200 55508 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:02:58 +0700] "GET /?path=/home/msgdhg02/public_html/atena46a.co/.well-known HTTP/1.1" 200 16975 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:02:58 +0700] "GET /?path=/home/msgdhg02/public_html/atena46a.co/wp-content HTTP/1.1" 200 44466 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:02:58 +0700] "GET /?fileloc=/home/msgdhg02/public_html/atena46a.co/uzZBlNCZUz.php&path=/home/msgdhg02/public_html/atena46a.co HTTP/1.1" 200 32380 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:02:58 +0700] "GET /?path=/home/msgdhg02/public_html/atena46a.co/wp-includes HTTP/1.1" 200 180006 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:02:58 +0700] "GET /?path=/home/msgdhg02/public_html/atena46a.co/wp-admin HTTP/1.1" 200 180006 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:02:59 +0700] "GET /?fileloc=/home/msgdhg02/public_html/atena46a.co/wp-activate.php&path=/home/msgdhg02/public_html/atena46a.co HTTP/1.1" 200 22707 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:00 +0700] "GET /?fileloc=/home/msgdhg02/public_html/atena46a.co/wp-blog-header.php&path=/home/msgdhg02/public_html/atena46a.co HTTP/1.1" 200 13722 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:01 +0700] "GET /?fileloc=/home/msgdhg02/public_html/atena46a.co/wp-config-sample.php&path=/home/msgdhg02/public_html/atena46a.co HTTP/1.1" 200 17067 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:02 +0700] "GET /?fileloc=/home/msgdhg02/public_html/atena46a.co/wp-comments-post.php&path=/home/msgdhg02/public_html/atena46a.co HTTP/1.1" 200 16019 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:01 +0700] "GET /?fileloc=/home/msgdhg02/public_html/atena46a.co/wp-load.php&path=/home/msgdhg02/public_html/atena46a.co HTTP/1.1" 200 17856 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:02 +0700] "GET /?fileloc=/home/msgdhg02/public_html/atena46a.co/wp-mail.php&path=/home/msgdhg02/public_html/atena46a.co HTTP/1.1" 200 23238 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:02 +0700] "GET /?fileloc=/home/msgdhg02/public_html/atena46a.co/wp-settings.php&path=/home/msgdhg02/public_html/atena46a.co HTTP/1.1" 200 50331 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:03 +0700] "GET /?fileloc=/home/msgdhg02/public_html/atena46a.co/wp-themes.php&path=/home/msgdhg02/public_html/atena46a.co HTTP/1.1" 200 176872 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:03 +0700] "GET /?fileloc=/home/msgdhg02/public_html/atena46a.co/wp-links-opml.php&path=/home/msgdhg02/public_html/atena46a.co HTTP/1.1" 200 16396 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:05 +0700] "GET /?fileloc=/home/msgdhg02/public_html/atena46a.co/wp_luci.php&path=/home/msgdhg02/public_html/atena46a.co HTTP/1.1" 200 47490 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:05 +0700] "GET /?fileloc=/home/msgdhg02/public_html/atena46a.co/xmlrpc.php&path=/home/msgdhg02/public_html/atena46a.co HTTP/1.1" 200 17213 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:05 +0700] "GET /?path=//home HTTP/1.1" 200 13579 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:06 +0700] "GET /?path=//lib HTTP/1.1" 200 62085 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:06 +0700] "GET /?path=//media HTTP/1.1" 200 13581 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:06 +0700] "GET /?path=//root HTTP/1.1" 200 13579 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:07 +0700] "GET /?fileloc=//razor-agent.log&path=/ HTTP/1.1" 200 13212 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:07 +0700] "GET /?path=//run HTTP/1.1" 200 161312 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:08 +0700] "GET /?path=/home/msgdhg02/.cache HTTP/1.1" 200 15301 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:08 +0700] "GET /?path=//var HTTP/1.1" 200 46937 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:08 +0700] "GET /?path=//proc HTTP/1.1" 200 180006 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:10 +0700] "GET /?path=/home/msgdhg02/.caldav HTTP/1.1" 200 135740 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:11 +0700] "GET /?path=/home/msgdhg02/.cpaddons HTTP/1.1" 200 15094 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:11 +0700] "GET /?path=//srv HTTP/1.1" 200 13577 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:11 +0700] "GET /?path=/home/msgdhg02/.htpasswds HTTP/1.1" 200 15103 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:11 +0700] "GET /?path=/home/msgdhg02/.wp-cli HTTP/1.1" 200 15064 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:11 +0700] "GET /?path=/home/msgdhg02/access-logs HTTP/1.1" 200 180006 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:12 +0700] "GET /?path=/home/msgdhg02/bin HTTP/1.1" 200 13665 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:12 +0700] "GET /?path=/home/msgdhg02/logs HTTP/1.1" 200 180006 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:14 +0700] "GET /?path=/home/msgdhg02/perl5 HTTP/1.1" 200 16423 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:14 +0700] "GET /?path=/home/msgdhg02/php HTTP/1.1" 200 24915 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:16 +0700] "GET /?fileloc=/home/msgdhg02/.bash_logout&path=/home/msgdhg02 HTTP/1.1" 200 13206 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:16 +0700] "GET /?fileloc=/home/msgdhg02/.bash_profile&path=/home/msgdhg02 HTTP/1.1" 200 13330 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:17 +0700] "GET /?path=/home/msgdhg02/ssl HTTP/1.1" 200 20776 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:18 +0700] "GET /?fileloc=/home/msgdhg02/.myimunify_id&path=/home/msgdhg02 HTTP/1.1" 200 13291 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:18 +0700] "GET /?fileloc=/home/msgdhg02/.imunify_patch_id&path=/home/msgdhg02 HTTP/1.1" 200 13299 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:19 +0700] "GET /?fileloc=/home/msgdhg02/.pearrc&path=/home/msgdhg02 HTTP/1.1" 200 14002 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:20 +0700] "GET /?fileloc=/home/msgdhg02/.lastlogin&path=/home/msgdhg02 HTTP/1.1" 200 13774 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:20 +0700] "GET /?fileloc=/home/msgdhg02/.bashrc&path=/home/msgdhg02 HTTP/1.1" 200 13599 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:21 +0700] "GET /?path=//dev HTTP/1.1" 200 40292 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:21 +0700] "GET /?path=//bin HTTP/1.1" 200 16326 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:23 +0700] "GET /?path=//boot HTTP/1.1" 200 45566 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:24 +0700] "GET /?fileloc=/home/msgdhg02/.gemrc&path=/home/msgdhg02 HTTP/1.1" 200 13391 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:25 +0700] "GET /?path=//etc HTTP/1.1" 200 180006 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:27 +0700] "GET /?path=//backup HTTP/1.1" 200 13583 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:27 +0700] "GET /?path=//lib64 HTTP/1.1" 200 65430 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:27 +0700] "GET /?path=//opt HTTP/1.1" 200 25733 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:28 +0700] "GET /?path=//mnt HTTP/1.1" 200 13577 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:28 +0700] "GET /?path=//scripts HTTP/1.1" 200 180006 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:29 +0700] "GET /?path=//sbin HTTP/1.1" 200 180006 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:30 +0700] "GET /?path=//sys HTTP/1.1" 200 28249 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:30 +0700] "GET /?path=//tmp HTTP/1.1" 200 54138 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:30 +0700] "GET /?fileloc=//.autorelabel&path=/ HTTP/1.1" 200 13100 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:30 +0700] "GET /?path=/home/msgdhg02/.gnupg HTTP/1.1" 200 16695 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:31 +0700] "GET /?path=/home/msgdhg02/.koality HTTP/1.1" 200 13675 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:32 +0700] "GET /?path=/home/msgdhg02/.cpanel HTTP/1.1" 200 23902 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:32 +0700] "GET /?path=/home/msgdhg02/.trash HTTP/1.1" 200 16719 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:33 +0700] "GET /?path=/home/msgdhg02/.razor HTTP/1.1" 200 24624 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:34 +0700] "GET /?path=/home/msgdhg02/.spamassassin HTTP/1.1" 200 18288 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:34 +0700] "GET /?path=/home/msgdhg02/domain_removal_backup_20260905 HTTP/1.1" 200 30189 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:34 +0700] "GET /?path=/home/msgdhg02/.wp-toolkit HTTP/1.1" 200 86101 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:35 +0700] "GET /?path=//usr HTTP/1.1" 200 29644 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:36 +0700] "GET /?path=/home/msgdhg02/backdoor_backup_server2 HTTP/1.1" 200 180006 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:37 +0700] "GET /?path=/home/msgdhg02/quarantine_webshells_server2 HTTP/1.1" 200 18519 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:37 +0700] "GET /?path=/home/msgdhg02/etc HTTP/1.1" 200 130169 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:38 +0700] "GET /?path=/home/msgdhg02/mail HTTP/1.1" 200 180006 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:39 +0700] "GET /?fileloc=//error_log&path=/ HTTP/1.1" 200 41177 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:40 +0700] "GET /?path=/home/msgdhg02/wordpress-backups HTTP/1.1" 200 15386 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:40 +0700] "GET /?path=/home/msgdhg02/tmp HTTP/1.1" 200 20612 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:41 +0700] "GET /?path=/home/msgdhg02/www HTTP/1.1" 200 171822 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:42 +0700] "GET /?fileloc=/home/msgdhg02/.bash_history&path=/home/msgdhg02 HTTP/1.1" 200 28312 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:42 +0700] "GET /?path=/home/msgdhg02/public_ftp HTTP/1.1" 200 15091 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:46 +0700] "GET /?fileloc=/home/msgdhg02/.spamassassinenable&path=/home/msgdhg02 HTTP/1.1" 200 13195 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:46 +0700] "GET /?fileloc=/home/msgdhg02/clean_backdoor_server2.sh&path=/home/msgdhg02 HTTP/1.1" 200 14957 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:46 +0700] "GET /?fileloc=/home/msgdhg02/.spamassassinboxenable&path=/home/msgdhg02 HTTP/1.1" 200 13198 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:47 +0700] "GET /?fileloc=/home/msgdhg02/full_user_list.txt&path=/home/msgdhg02 HTTP/1.1" 200 19870 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:48 +0700] "GET /?fileloc=/home/msgdhg02/error_log&path=/home/msgdhg02 HTTP/1.1" 200 100843 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:50 +0700] "GET /?fileloc=/home/msgdhg02/no_real_user_domains.txt&path=/home/msgdhg02 HTTP/1.1" 200 13266 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:50 +0700] "GET /?fileloc=/home/msgdhg02/.wp-toolkit-identifier&path=/home/msgdhg02 HTTP/1.1" 200 13882 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:50 +0700] "GET /?fileloc=/home/msgdhg02/infected_recheck_server2.txt&path=/home/msgdhg02 HTTP/1.1" 200 13204 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:50 +0700] "GET /?fileloc=/home/msgdhg02/final_status_server2.csv&path=/home/msgdhg02 HTTP/1.1" 200 14691 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:50 +0700] "GET /?fileloc=/home/msgdhg02/backdoor_clean_report_server2.txt&path=/home/msgdhg02 HTTP/1.1" 200 26628 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:51 +0700] "GET /?fileloc=/home/msgdhg02/mass_user_cleanup.sh&path=/home/msgdhg02 HTTP/1.1" 200 15642 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:52 +0700] "GET /?fileloc=/home/msgdhg02/user_cleanup_report.txt&path=/home/msgdhg02 HTTP/1.1" 200 36648 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
213.209.159.84 - - [21/Sep/2026:11:03:54 +0700] "GET /?fileloc=/home/msgdhg02/infected_server2.txt&path=/home/msgdhg02 HTTP/1.1" 200 23317 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
172.68.183.81 - - [21/Sep/2026:12:05:10 +0700] "GET /wp-admin/install.php?step=1 HTTP/1.1" 200 180691 "-" "http://atena46a.co/wp-admin/install.php?step=1"
31.57.65.120 - - [21/Sep/2026:12:14:37 +0700] "GET / HTTP/1.1" 200 56002 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.66 Safari/537.36"