??????????????
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 173

Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 174

Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 175

Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 176

Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 177

Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 178
216.244.66.250 - - [20/Dec/2025:22:35:50 +0800] "GET /robots.txt HTTP/1.1" 403 - "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 4.190.208.97 - - [20/Dec/2025:23:31:30 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 33840 "-" "-" 72.18.130.250 - - [20/Dec/2025:23:31:31 +0800] "POST /wp-cron.php?doing_wp_cron=1766244691.1041190624237060546875 HTTP/1.1" 200 - "http://rambut.bf1.my/wp-cron.php?doing_wp_cron=1766244691.1041190624237060546875" "WordPress/5.7.14; https://rambut.bf1.my" 4.190.208.97 - - [20/Dec/2025:23:31:32 +0800] "GET /dejavu.php HTTP/1.1" 500 36038 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:31:36 +0800] "GET /yu.php HTTP/1.1" 500 36014 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:31:39 +0800] "GET /bbn.php HTTP/1.1" 500 36020 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:31:42 +0800] "GET /ssxsl.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:31:44 +0800] "GET /tqloh.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:31:47 +0800] "GET /hbyra.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:31:50 +0800] "GET /dparm.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:31:52 +0800] "GET /doelr.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:31:54 +0800] "GET /xenium4x.php HTTP/1.1" 500 36050 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:31:56 +0800] "GET /dout.php HTTP/1.1" 500 36026 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:31:58 +0800] "GET /dng.php HTTP/1.1" 500 36020 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:32:01 +0800] "GET /rh1.php HTTP/1.1" 500 36020 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:32:04 +0800] "GET /w3llstore.php HTTP/1.1" 500 36056 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:32:07 +0800] "GET /s12.php HTTP/1.1" 500 36020 "-" "-" 72.18.130.250 - - [20/Dec/2025:23:32:07 +0800] "POST /wp-cron.php?doing_wp_cron=1766244727.9900240898132324218750 HTTP/1.1" 200 - "http://rambut.bf1.my/wp-cron.php?doing_wp_cron=1766244727.9900240898132324218750" "WordPress/5.7.14; https://rambut.bf1.my" 4.190.208.97 - - [20/Dec/2025:23:32:12 +0800] "GET /vx.php HTTP/1.1" 500 36014 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:32:14 +0800] "GET /ol.php HTTP/1.1" 500 36014 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:32:16 +0800] "GET /man.php HTTP/1.1" 500 36020 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:32:19 +0800] "GET /g7y.php HTTP/1.1" 500 36020 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:32:22 +0800] "GET /ging.php HTTP/1.1" 500 36026 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:32:24 +0800] "GET /veuntzdf.php HTTP/1.1" 500 36050 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:32:30 +0800] "GET /xenium4.php HTTP/1.1" 500 36044 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:32:31 +0800] "GET /pu8.php HTTP/1.1" 500 36020 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:32:34 +0800] "GET /wp-blog-front.php HTTP/1.1" 500 36080 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:32:36 +0800] "GET /wp-Blogs.php HTTP/1.1" 500 36050 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:32:38 +0800] "GET /wp-loccs.php HTTP/1.1" 500 36050 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:32:41 +0800] "GET /wp-mails.php HTTP/1.1" 500 36050 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:32:43 +0800] "GET /blurbs18.php HTTP/1.1" 500 36050 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:32:44 +0800] "GET /green.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:32:46 +0800] "GET /kao.php HTTP/1.1" 500 36020 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:32:48 +0800] "GET /ii5file.php HTTP/1.1" 500 36044 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:32:50 +0800] "GET /k.php HTTP/1.1" 500 36008 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:32:52 +0800] "GET /zc-729.php HTTP/1.1" 500 36038 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:32:55 +0800] "GET /bolt.php?p= HTTP/1.1" 301 - "-" "-" 4.190.208.97 - - [20/Dec/2025:23:32:56 +0800] "GET /bolt.php HTTP/1.1" 500 36026 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:32:57 +0800] "GET /sid3.php HTTP/1.1" 500 36026 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:32:59 +0800] "GET /file30.php HTTP/1.1" 500 36038 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:33:02 +0800] "GET /clss.php HTTP/1.1" 500 36026 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:33:03 +0800] "GET /test1.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:33:08 +0800] "GET /ioxi-o.php HTTP/1.1" 500 36038 "-" "-" 72.18.130.250 - - [20/Dec/2025:23:33:08 +0800] "POST /wp-cron.php?doing_wp_cron=1766244788.7860538959503173828125 HTTP/1.1" 200 - "http://rambut.bf1.my/wp-cron.php?doing_wp_cron=1766244788.7860538959503173828125" "WordPress/5.7.14; https://rambut.bf1.my" 4.190.208.97 - - [20/Dec/2025:23:33:12 +0800] "GET /abc.php HTTP/1.1" 500 36020 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:33:16 +0800] "GET /wp-good.php HTTP/1.1" 500 36044 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:33:19 +0800] "GET /about.php?p= HTTP/1.1" 301 - "-" "-" 4.190.208.97 - - [20/Dec/2025:23:33:20 +0800] "GET /about.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:33:21 +0800] "GET /atex1.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:33:23 +0800] "GET /wp-advaced.php HTTP/1.1" 500 36062 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:33:26 +0800] "GET /x.php HTTP/1.1" 500 36008 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:33:28 +0800] "GET /wp.php HTTP/1.1" 500 36014 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:33:31 +0800] "GET /hplfuns.php HTTP/1.1" 500 36044 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:33:35 +0800] "GET /wp-64wscx6shd.php HTTP/1.1" 500 36080 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:33:38 +0800] "GET /gg.php HTTP/1.1" 500 36014 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:33:42 +0800] "GET /ahax.php HTTP/1.1" 500 36026 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:33:48 +0800] "GET /222.php HTTP/1.1" 500 36020 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:33:52 +0800] "GET /z60.php?p= HTTP/1.1" 301 - "-" "-" 4.190.208.97 - - [20/Dec/2025:23:33:53 +0800] "GET /z60.php HTTP/1.1" 500 36020 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:33:56 +0800] "GET /gecko.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:33:59 +0800] "GET /abcd.php HTTP/1.1" 500 36026 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:34:01 +0800] "GET /kdgok.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:34:03 +0800] "GET /0x.php HTTP/1.1" 500 36014 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:34:06 +0800] "GET /okxh.php HTTP/1.1" 500 36026 "-" "-" 72.18.130.250 - - [20/Dec/2025:23:34:06 +0800] "POST /wp-cron.php?doing_wp_cron=1766244846.9236140251159667968750 HTTP/1.1" 200 - "http://rambut.bf1.my/wp-cron.php?doing_wp_cron=1766244846.9236140251159667968750" "WordPress/5.7.14; https://rambut.bf1.my" 4.190.208.97 - - [20/Dec/2025:23:34:13 +0800] "GET /ghreshttryu.php HTTP/1.1" 500 36068 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:34:17 +0800] "GET /krypton.php HTTP/1.1" 500 36044 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:34:20 +0800] "GET /error_log.php HTTP/1.1" 500 36056 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:34:23 +0800] "GET /d12.php HTTP/1.1" 500 36020 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:34:25 +0800] "GET /admin-header.php HTTP/1.1" 500 36074 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:34:28 +0800] "GET /dox.php HTTP/1.1" 500 36020 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:34:33 +0800] "GET /ss.php HTTP/1.1" 500 36014 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:34:36 +0800] "GET /yas.php HTTP/1.1" 500 36020 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:34:39 +0800] "GET /app.php HTTP/1.1" 500 36020 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:34:41 +0800] "GET /tesTyuj.php HTTP/1.1" 500 36044 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:34:43 +0800] "GET /ww3.php HTTP/1.1" 500 36020 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:34:47 +0800] "GET /budmachine/web/s.php?p= HTTP/1.1" 301 - "-" "-" 4.190.208.97 - - [20/Dec/2025:23:34:48 +0800] "GET /budmachine/web/s.php HTTP/1.1" 500 36108 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:34:50 +0800] "GET /wp-sid.php HTTP/1.1" 500 36038 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:34:55 +0800] "GET /wp-title.php HTTP/1.1" 500 36050 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:34:58 +0800] "GET /wp-home.php HTTP/1.1" 500 36044 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:35:01 +0800] "GET /re.php HTTP/1.1" 500 36014 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:35:04 +0800] "GET /vanda.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:35:06 +0800] "GET /sid-file.php HTTP/1.1" 500 36050 "-" "-" 72.18.130.250 - - [20/Dec/2025:23:35:07 +0800] "POST /wp-cron.php?doing_wp_cron=1766244907.3600549697875976562500 HTTP/1.1" 200 - "http://rambut.bf1.my/wp-cron.php?doing_wp_cron=1766244907.3600549697875976562500" "WordPress/5.7.14; https://rambut.bf1.my" 4.190.208.97 - - [20/Dec/2025:23:35:09 +0800] "GET /l3gi0n.php HTTP/1.1" 500 36038 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:35:11 +0800] "GET /bo.php HTTP/1.1" 500 36014 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:35:14 +0800] "GET /Contrller.php HTTP/1.1" 500 36056 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:35:15 +0800] "GET /o2.php HTTP/1.1" 500 36014 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:35:17 +0800] "GET /inghl.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:35:20 +0800] "GET /wp-securitiy.php HTTP/1.1" 500 36074 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:35:24 +0800] "GET /click.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:35:26 +0800] "GET /wp-ac.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:35:31 +0800] "GET /karma_57c3d4.php HTTP/1.1" 500 36074 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:35:34 +0800] "GET /fc72f.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:35:35 +0800] "GET /wso.php HTTP/1.1" 500 36020 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:35:38 +0800] "GET /jjrpo.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:35:41 +0800] "GET /asd.php HTTP/1.1" 500 36020 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:35:44 +0800] "GET /xtt.php HTTP/1.1" 500 36020 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:35:46 +0800] "GET /s.php?p= HTTP/1.1" 301 - "-" "-" 4.190.208.97 - - [20/Dec/2025:23:35:47 +0800] "GET /s.php HTTP/1.1" 500 36008 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:35:49 +0800] "GET /t.php?p= HTTP/1.1" 301 - "-" "-" 4.190.208.97 - - [20/Dec/2025:23:35:50 +0800] "GET /t.php HTTP/1.1" 500 36008 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:35:51 +0800] "GET /lock360.php HTTP/1.1" 500 36044 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:35:53 +0800] "GET /jdlqi.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:35:56 +0800] "GET /khgdl.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:35:58 +0800] "GET /hehe.php HTTP/1.1" 500 36026 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:36:01 +0800] "GET /xopvne.php HTTP/1.1" 500 36038 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:36:04 +0800] "GET /lm18.php HTTP/1.1" 500 36026 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:36:06 +0800] "GET /5b9ac.php HTTP/1.1" 500 36032 "-" "-" 72.18.130.250 - - [20/Dec/2025:23:36:07 +0800] "POST /wp-cron.php?doing_wp_cron=1766244967.4340128898620605468750 HTTP/1.1" 200 - "http://rambut.bf1.my/wp-cron.php?doing_wp_cron=1766244967.4340128898620605468750" "WordPress/5.7.14; https://rambut.bf1.my" 4.190.208.97 - - [20/Dec/2025:23:36:10 +0800] "GET /co.php HTTP/1.1" 500 36014 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:36:11 +0800] "GET /56c53.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:36:13 +0800] "GET /ce.php HTTP/1.1" 500 36014 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:36:15 +0800] "GET /domains.php HTTP/1.1" 500 36044 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:36:18 +0800] "GET /55b76.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:36:20 +0800] "GET /asa.php HTTP/1.1" 500 36020 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:36:22 +0800] "GET /4fk6.php HTTP/1.1" 500 36026 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:36:24 +0800] "GET /z123.php HTTP/1.1" 500 36026 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:36:26 +0800] "GET /ccea.php HTTP/1.1" 500 36026 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:36:28 +0800] "GET /a5e0a.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:36:31 +0800] "GET /qaez.php56 HTTP/1.1" 500 36038 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:36:32 +0800] "GET /s.php HTTP/1.1" 500 36008 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:36:35 +0800] "GET /admin.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:36:37 +0800] "GET /s121ws2s.php HTTP/1.1" 500 36050 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:36:39 +0800] "GET /ww1.php?= HTTP/1.1" 500 36020 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:36:41 +0800] "GET /cc.php HTTP/1.1" 500 36014 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:36:44 +0800] "GET /ww3.php?p= HTTP/1.1" 301 - "-" "-" 4.190.208.97 - - [20/Dec/2025:23:36:44 +0800] "GET /ww3.php HTTP/1.1" 500 36020 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:36:45 +0800] "GET /783de.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:36:49 +0800] "GET /lm15.php HTTP/1.1" 500 36026 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:36:51 +0800] "GET /gdn.php HTTP/1.1" 500 36020 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:36:56 +0800] "GET /file5.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:36:59 +0800] "GET /3i8som87avh59dosfymtvCakc.php HTTP/1.1" 500 36152 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:37:11 +0800] "GET /rzki.php HTTP/1.1" 500 36026 "-" "-" 72.18.130.250 - - [20/Dec/2025:23:37:12 +0800] "POST /wp-cron.php?doing_wp_cron=1766245032.1805009841918945312500 HTTP/1.1" 200 - "http://rambut.bf1.my/wp-cron.php?doing_wp_cron=1766245032.1805009841918945312500" "WordPress/5.7.14; https://rambut.bf1.my" 4.190.208.97 - - [20/Dec/2025:23:37:14 +0800] "GET /sx.php HTTP/1.1" 500 36014 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:37:17 +0800] "GET /6kUgr4yGzxN.php HTTP/1.1" 500 36068 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:37:19 +0800] "GET /rp8zi.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:37:21 +0800] "GET /cc3.php HTTP/1.1" 500 36020 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:37:24 +0800] "GET /wp-user.php HTTP/1.1" 500 36044 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:37:26 +0800] "GET /wp-mail.php HTTP/1.1" 403 2650 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:37:27 +0800] "GET /wps.php HTTP/1.1" 500 36020 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:37:31 +0800] "GET /qV9GbcJwZgK.php HTTP/1.1" 500 36068 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:37:33 +0800] "GET /qsntqiho.php HTTP/1.1" 500 36050 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:37:35 +0800] "GET /qjaqjahu.php HTTP/1.1" 500 36050 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:37:38 +0800] "GET /qhLaGswd9DS.php HTTP/1.1" 500 36068 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:37:41 +0800] "GET /pwyjwrfr.php HTTP/1.1" 500 36050 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:37:44 +0800] "GET /pNRzcP6wtYy.php HTTP/1.1" 500 36068 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:37:47 +0800] "GET /ox8xhkkw.php HTTP/1.1" 500 36050 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:37:49 +0800] "GET /oc460l3x.php HTTP/1.1" 500 36050 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:37:52 +0800] "GET /NWqz649FIe7.php HTTP/1.1" 500 36068 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:37:58 +0800] "GET /nucqsqeg.php HTTP/1.1" 500 36050 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:38:00 +0800] "GET /mhpglaje.php HTTP/1.1" 500 36050 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:38:02 +0800] "GET /LvCBeZWaSgQ.php HTTP/1.1" 500 36068 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:38:04 +0800] "GET /KV7EGJmhHzX.php HTTP/1.1" 500 36068 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:38:07 +0800] "GET /ijNdPI1Orya.php HTTP/1.1" 500 36068 "-" "-" 72.18.130.250 - - [20/Dec/2025:23:38:07 +0800] "POST /wp-cron.php?doing_wp_cron=1766245087.6101889610290527343750 HTTP/1.1" 200 - "http://rambut.bf1.my/wp-cron.php?doing_wp_cron=1766245087.6101889610290527343750" "WordPress/5.7.14; https://rambut.bf1.my" 4.190.208.97 - - [20/Dec/2025:23:38:10 +0800] "GET /HPum4ZEBJRC.php HTTP/1.1" 500 36068 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:38:13 +0800] "GET /6kDPjgFTmvS.php HTTP/1.1" 500 36068 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:38:16 +0800] "GET /8xg5Bv6XIUw.php HTTP/1.1" 500 36068 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:38:17 +0800] "GET /aGeTbFjB5Zu.php HTTP/1.1" 500 36068 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:38:19 +0800] "GET /BMjXQkgwpeb.php HTTP/1.1" 500 36068 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:38:22 +0800] "GET /FSCMNvnjPX4.php HTTP/1.1" 500 36068 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:38:25 +0800] "GET /admin.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:38:28 +0800] "GET /hello.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:38:29 +0800] "GET /wsd.php HTTP/1.1" 500 36020 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:38:32 +0800] "GET /lib.php HTTP/1.1" 500 36020 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:38:33 +0800] "GET /wp-blog.php HTTP/1.1" 500 36044 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:38:36 +0800] "GET /shell.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:38:38 +0800] "GET /13.php HTTP/1.1" 500 36014 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:38:40 +0800] "GET /tt.php HTTP/1.1" 500 36014 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:38:42 +0800] "GET /sikma.php HTTP/1.1" 500 36032 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:38:44 +0800] "GET /44.php HTTP/1.1" 500 36014 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:38:46 +0800] "GET /database.php HTTP/1.1" 500 36050 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:38:49 +0800] "GET /file48.php HTTP/1.1" 500 36038 "-" "-" 4.190.208.97 - - [20/Dec/2025:23:38:51 +0800] "GET /zc-104.php HTTP/1.1" 500 36038 "-" "-" 142.93.0.66 - - [21/Dec/2025:01:22:44 +0800] "GET / HTTP/1.1" 200 8311 "-" "-" 142.93.0.66 - - [21/Dec/2025:01:22:45 +0800] "GET / HTTP/1.1" 200 33512 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:22:56 +0800] "POST /graphql HTTP/1.1" 404 31326 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:22:57 +0800] "POST /api HTTP/1.1" 404 31302 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:22:58 +0800] "POST /api/graphql HTTP/1.1" 404 31355 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:22:58 +0800] "POST /graphql/api HTTP/1.1" 404 31355 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:22:59 +0800] "POST /api/gql HTTP/1.1" 404 31331 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:23:01 +0800] "GET /swagger-ui.html HTTP/1.1" 404 31374 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:23:02 +0800] "GET /swagger/index.html HTTP/1.1" 404 31397 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:23:03 +0800] "GET /swagger/swagger-ui.html HTTP/1.1" 404 31427 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:23:04 +0800] "GET /webjars/swagger-ui/index.html HTTP/1.1" 404 31468 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:23:05 +0800] "GET /swagger.json HTTP/1.1" 404 31356 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:23:06 +0800] "GET /swagger/v1/swagger.json HTTP/1.1" 404 31432 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:23:08 +0800] "GET /v2/api-docs HTTP/1.1" 404 31355 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 72.18.130.250 - - [21/Dec/2025:01:23:06 +0800] "POST /wp-cron.php?doing_wp_cron=1766251386.8156650066375732421875 HTTP/1.1" 200 - "http://rambut.bf1.my/wp-cron.php?doing_wp_cron=1766251386.8156650066375732421875" "WordPress/5.7.14; https://rambut.bf1.my" 142.93.0.66 - - [21/Dec/2025:01:23:09 +0800] "GET /v3/api-docs HTTP/1.1" 404 31355 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:23:10 +0800] "GET /api-docs/swagger.json HTTP/1.1" 404 31415 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:23:11 +0800] "GET /api/swagger.json HTTP/1.1" 404 31385 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:23:12 +0800] "GET /@vite/env HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:23:13 +0800] "GET /actuator/env HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:23:14 +0800] "GET /server HTTP/1.1" 404 33573 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:23:15 +0800] "GET /.vscode/sftp.json HTTP/1.1" 404 33644 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:23:17 +0800] "GET /about HTTP/1.1" 404 33567 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:23:18 +0800] "GET /debug/default/view?panel=config HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:23:19 +0800] "GET /v2/_catalog HTTP/1.1" 404 31355 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:23:20 +0800] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 404 34002 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:23:21 +0800] "GET /server-status HTTP/1.1" 404 33615 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:23:22 +0800] "GET /login.action HTTP/1.1" 404 33609 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:23:23 +0800] "GET /_all_dbs HTTP/1.1" 404 31332 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:23:24 +0800] "GET /.DS_Store HTTP/1.1" 404 33591 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:23:25 +0800] "GET /.env HTTP/1.1" 404 33561 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:23:27 +0800] "GET /.git/config HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:23:28 +0800] "GET /s/035323e2033313e28313e22373/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 404 34165 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:23:29 +0800] "GET /config.json HTTP/1.1" 404 33603 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:23:30 +0800] "GET /telescope/requests HTTP/1.1" 404 33650 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:23:31 +0800] "GET /info.php HTTP/1.1" 404 33585 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 142.93.0.66 - - [21/Dec/2025:01:23:32 +0800] "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 200 1114 "-" "Mozilla/5.0 (l9scan/2.0.035323e2033313e28313e22373; +https://leakix.net)" 104.197.69.115 - - [21/Dec/2025:01:43:16 +0800] "GET / HTTP/1.1" 200 33563 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 34.123.170.104 - - [21/Dec/2025:01:43:27 +0800] "GET /wp-content/plugins/ecwid-shopping-cart/css/frontend.css?ver=6.10.12 HTTP/1.1" 200 2077 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 34.72.176.129 - - [21/Dec/2025:01:43:27 +0800] "GET /wp-content/plugins/woo-title-limit/public/css/woo-title-limit-public.css?ver=2.0.3 HTTP/1.1" 200 263 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 34.72.176.129 - - [21/Dec/2025:01:43:27 +0800] "GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1" 200 11224 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 104.197.69.115 - - [21/Dec/2025:01:43:27 +0800] "GET /wp-includes/css/dist/block-library/style.min.css?ver=5.7.14 HTTP/1.1" 200 58171 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 34.123.170.104 - - [21/Dec/2025:01:43:27 +0800] "GET /wp-includes/js/jquery/jquery.min.js?ver=3.5.1 HTTP/1.1" 200 89496 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 34.72.176.129 - - [21/Dec/2025:01:43:28 +0800] "GET /wp-content/plugins/ecwid-shopping-cart/js/nav-menu-frontend.js?ver=6.10.12 HTTP/1.1" 200 51301 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 34.72.176.129 - - [21/Dec/2025:01:43:28 +0800] "GET /wp-content/plugins/woo-title-limit/public/js/woo-title-limit-public.js?ver=2.0.3 HTTP/1.1" 200 25806 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 34.123.170.104 - - [21/Dec/2025:01:43:28 +0800] "GET /wp-content/plugins/ecwid-shopping-cart/js/frontend.js?ver=6.10.12 HTTP/1.1" 200 45754 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 205.169.39.23 - - [21/Dec/2025:01:43:42 +0800] "GET /wp-content/plugins/ecwid-shopping-cart/js/frontend.js?ver=6.10.12 HTTP/1.1" 200 45754 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 65.87.7.112 - - [21/Dec/2025:01:43:54 +0800] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 65.87.7.112 - - [21/Dec/2025:01:43:58 +0800] "HEAD /_next HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 65.87.7.112 - - [21/Dec/2025:01:44:00 +0800] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 65.87.7.112 - - [21/Dec/2025:01:44:04 +0800] "HEAD /_next HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 65.87.7.112 - - [21/Dec/2025:01:43:55 +0800] "GET / HTTP/1.1" 200 33563 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 65.87.7.112 - - [21/Dec/2025:01:44:01 +0800] "GET / HTTP/1.1" 200 33563 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 34.72.176.129 - - [21/Dec/2025:01:44:04 +0800] "GET / HTTP/1.1" 200 33563 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 104.197.69.115 - - [21/Dec/2025:01:44:15 +0800] "GET /wp-content/plugins/woo-title-limit/public/css/woo-title-limit-public.css?ver=2.0.3 HTTP/1.1" 200 263 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 34.72.176.129 - - [21/Dec/2025:01:44:15 +0800] "GET /wp-content/plugins/ecwid-shopping-cart/css/frontend.css?ver=6.10.12 HTTP/1.1" 200 2077 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 104.197.69.115 - - [21/Dec/2025:01:44:15 +0800] "GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1" 200 11224 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 34.123.170.104 - - [21/Dec/2025:01:44:15 +0800] "GET /wp-content/plugins/woo-title-limit/public/js/woo-title-limit-public.js?ver=2.0.3 HTTP/1.1" 200 25806 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 34.123.170.104 - - [21/Dec/2025:01:44:15 +0800] "GET /wp-includes/css/dist/block-library/style.min.css?ver=5.7.14 HTTP/1.1" 200 58171 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 104.197.69.115 - - [21/Dec/2025:01:44:15 +0800] "GET /wp-content/plugins/ecwid-shopping-cart/js/frontend.js?ver=6.10.12 HTTP/1.1" 200 45754 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 34.72.176.129 - - [21/Dec/2025:01:44:15 +0800] "GET /wp-content/plugins/ecwid-shopping-cart/js/nav-menu-frontend.js?ver=6.10.12 HTTP/1.1" 200 51301 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 34.72.176.129 - - [21/Dec/2025:01:44:15 +0800] "GET /wp-includes/js/jquery/jquery.min.js?ver=3.5.1 HTTP/1.1" 200 89496 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 72.18.130.250 - - [21/Dec/2025:01:44:52 +0800] "POST /wp-cron.php?doing_wp_cron=1766252692.9280159473419189453125 HTTP/1.1" 200 - "http://rambut.bf1.my/wp-cron.php?doing_wp_cron=1766252692.9280159473419189453125" "WordPress/5.7.14; https://rambut.bf1.my" 34.72.176.129 - - [21/Dec/2025:01:44:52 +0800] "GET / HTTP/1.1" 200 33563 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 104.197.69.115 - - [21/Dec/2025:01:45:04 +0800] "GET /wp-content/plugins/ecwid-shopping-cart/css/frontend.css?ver=6.10.12 HTTP/1.1" 200 2077 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 34.123.170.104 - - [21/Dec/2025:01:45:04 +0800] "GET /wp-content/plugins/woo-title-limit/public/css/woo-title-limit-public.css?ver=2.0.3 HTTP/1.1" 200 263 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 34.72.176.129 - - [21/Dec/2025:01:45:04 +0800] "GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1" 200 11224 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 34.123.170.104 - - [21/Dec/2025:01:45:04 +0800] "GET /wp-includes/css/dist/block-library/style.min.css?ver=5.7.14 HTTP/1.1" 200 58171 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 34.72.176.129 - - [21/Dec/2025:01:45:04 +0800] "GET /wp-includes/js/jquery/jquery.min.js?ver=3.5.1 HTTP/1.1" 200 89496 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 34.123.170.104 - - [21/Dec/2025:01:45:04 +0800] "GET /wp-content/plugins/woo-title-limit/public/js/woo-title-limit-public.js?ver=2.0.3 HTTP/1.1" 200 25806 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 104.197.69.115 - - [21/Dec/2025:01:45:04 +0800] "GET /wp-content/plugins/ecwid-shopping-cart/js/nav-menu-frontend.js?ver=6.10.12 HTTP/1.1" 200 51301 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 34.123.170.104 - - [21/Dec/2025:01:45:04 +0800] "GET /wp-content/plugins/ecwid-shopping-cart/js/frontend.js?ver=6.10.12 HTTP/1.1" 200 45754 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 72.18.130.250 - - [21/Dec/2025:01:45:41 +0800] "POST /wp-cron.php?doing_wp_cron=1766252741.6078910827636718750000 HTTP/1.1" 200 - "http://rambut.bf1.my/wp-cron.php?doing_wp_cron=1766252741.6078910827636718750000" "WordPress/5.7.14; https://rambut.bf1.my" 104.197.69.115 - - [21/Dec/2025:01:45:41 +0800] "GET / HTTP/1.1" 200 33563 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 34.123.170.104 - - [21/Dec/2025:01:45:53 +0800] "GET /wp-content/plugins/woo-title-limit/public/css/woo-title-limit-public.css?ver=2.0.3 HTTP/1.1" 200 263 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 34.72.176.129 - - [21/Dec/2025:01:45:53 +0800] "GET /wp-content/plugins/ecwid-shopping-cart/css/frontend.css?ver=6.10.12 HTTP/1.1" 200 2077 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 34.123.170.104 - - [21/Dec/2025:01:45:53 +0800] "GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1" 200 11224 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 34.72.176.129 - - [21/Dec/2025:01:45:53 +0800] "GET /wp-includes/css/dist/block-library/style.min.css?ver=5.7.14 HTTP/1.1" 200 58171 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 34.72.176.129 - - [21/Dec/2025:01:45:53 +0800] "GET /wp-content/plugins/woo-title-limit/public/js/woo-title-limit-public.js?ver=2.0.3 HTTP/1.1" 200 25806 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 34.122.147.229 - - [21/Dec/2025:01:45:53 +0800] "GET /wp-content/plugins/ecwid-shopping-cart/js/nav-menu-frontend.js?ver=6.10.12 HTTP/1.1" 200 51301 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 34.123.170.104 - - [21/Dec/2025:01:45:53 +0800] "GET /wp-content/plugins/ecwid-shopping-cart/js/frontend.js?ver=6.10.12 HTTP/1.1" 200 45754 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 34.123.170.104 - - [21/Dec/2025:01:45:53 +0800] "GET /wp-includes/js/jquery/jquery.min.js?ver=3.5.1 HTTP/1.1" 200 89496 "http://www.rambut.bf1.my/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 114.119.139.61 - - [21/Dec/2025:02:49:37 +0800] "GET / HTTP/1.1" 200 33512 "-" "Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 114.119.156.122 - - [21/Dec/2025:03:16:11 +0800] "GET / HTTP/1.1" 200 33512 "-" "Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 216.244.66.250 - - [21/Dec/2025:06:42:15 +0800] "GET /robots.txt HTTP/1.1" 403 - "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 203.2.115.155 - - [21/Dec/2025:08:34:55 +0800] "GET /wp-login.php HTTP/1.1" 403 - "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" 203.2.115.155 - - [21/Dec/2025:08:34:55 +0800] "GET /?author=1 HTTP/1.1" 403 - "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" 203.2.115.155 - - [21/Dec/2025:08:34:55 +0800] "GET /?author=2 HTTP/1.1" 403 - "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" 203.2.115.155 - - [21/Dec/2025:08:34:56 +0800] "GET /?author=3 HTTP/1.1" 403 - "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" 203.2.115.155 - - [21/Dec/2025:08:34:56 +0800] "GET /?author=4 HTTP/1.1" 403 - "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" 203.2.115.155 - - [21/Dec/2025:08:34:56 +0800] "GET /?author=5 HTTP/1.1" 403 - "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" 203.2.115.155 - - [21/Dec/2025:08:34:56 +0800] "GET /?author=6 HTTP/1.1" 403 - "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" 203.2.115.155 - - [21/Dec/2025:08:34:57 +0800] "GET /?author=7 HTTP/1.1" 403 - "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" 203.2.115.155 - - [21/Dec/2025:08:34:57 +0800] "GET /?author=8 HTTP/1.1" 403 - "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" 203.2.115.155 - - [21/Dec/2025:08:34:57 +0800] "GET /?author=9 HTTP/1.1" 403 - "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" 203.2.115.155 - - [21/Dec/2025:08:34:57 +0800] "GET /?author=10 HTTP/1.1" 403 - "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" 203.2.115.155 - - [21/Dec/2025:08:34:57 +0800] "GET /?author=11 HTTP/1.1" 403 - "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" 203.2.115.155 - - [21/Dec/2025:08:34:59 +0800] "GET /?author=12 HTTP/1.1" 403 - "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" 203.2.115.155 - - [21/Dec/2025:08:34:59 +0800] "GET /?author=13 HTTP/1.1" 403 - "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" 203.2.115.155 - - [21/Dec/2025:08:34:59 +0800] "GET /?author=14 HTTP/1.1" 403 - "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" 203.2.115.155 - - [21/Dec/2025:08:35:00 +0800] "GET /?author=15 HTTP/1.1" 403 - "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" 203.2.115.155 - - [21/Dec/2025:08:35:00 +0800] "GET /?author=16 HTTP/1.1" 403 - "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" 203.2.115.155 - - [21/Dec/2025:08:35:00 +0800] "GET /?author=17 HTTP/1.1" 403 - "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" 203.2.115.155 - - [21/Dec/2025:08:35:00 +0800] "GET /?author=18 HTTP/1.1" 403 - "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" 203.2.115.155 - - [21/Dec/2025:08:35:01 +0800] "GET /?author=19 HTTP/1.1" 403 - "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" 203.2.115.155 - - [21/Dec/2025:08:35:01 +0800] "GET /?author=20 HTTP/1.1" 403 - "-" "Apache-HttpClient/4.5.2 (Java/1.8.0_161)" 216.244.66.250 - - [21/Dec/2025:09:39:26 +0800] "GET /robots.txt HTTP/1.1" 403 - "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 174.138.29.254 - - [21/Dec/2025:10:28:43 +0800] "GET /wp-admin/css/ HTTP/1.1" 200 19544 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:28:59 +0800] "GET /wp-content/uploads/2025/12/ HTTP/1.1" 200 666 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:29:03 +0800] "GET /wp-content/uploads/2025/11/ HTTP/1.1" 200 666 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:29:15 +0800] "GET /wp-content/uploads/ HTTP/1.1" 200 2573 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:29:26 +0800] "GET /wp-content/upgrade/ HTTP/1.1" 200 637 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:29:49 +0800] "GET /wp-admin/includes/ HTTP/1.1" 200 20996 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:29:50 +0800] "GET /wp-admin/includes/ HTTP/1.1" 200 20996 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:29:51 +0800] "GET /wp-admin/maint/ HTTP/1.1" 200 805 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:29:51 +0800] "GET /wp-admin/maint/ HTTP/1.1" 200 805 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 72.18.130.250 - - [21/Dec/2025:10:29:58 +0800] "POST /wp-cron.php?doing_wp_cron=1766284197.9558489322662353515625 HTTP/1.1" 200 - "http://rambut.bf1.my/wp-cron.php?doing_wp_cron=1766284197.9558489322662353515625" "WordPress/5.7.14; https://rambut.bf1.my" 72.18.130.250 - - [21/Dec/2025:10:29:58 +0800] "POST /wp-cron.php?doing_wp_cron=1766284197.9558870792388916015625 HTTP/1.1" 200 - "http://rambut.bf1.my/wp-cron.php?doing_wp_cron=1766284197.9558870792388916015625" "WordPress/5.7.14; https://rambut.bf1.my" 174.138.29.254 - - [21/Dec/2025:10:29:52 +0800] "GET /wp-admin/network/ HTTP/1.1" 302 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:29:34 +0800] "GET /wp-content/languages/ HTTP/1.1" 404 8311 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:30:24 +0800] "GET /wp-admin/css/ HTTP/1.1" 200 19544 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:30:25 +0800] "GET /wp-content/uploads/2025/12/ HTTP/1.1" 200 666 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:30:26 +0800] "GET /wp-content/uploads/2025/11/ HTTP/1.1" 200 666 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:30:26 +0800] "GET /wp-content/uploads/ HTTP/1.1" 200 2573 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:30:27 +0800] "GET /wp-content/upgrade/ HTTP/1.1" 200 637 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:30:28 +0800] "GET /wp-content/languages/ HTTP/1.1" 404 33662 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:30:29 +0800] "GET /wp-admin/includes/ HTTP/1.1" 200 20996 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:30:30 +0800] "GET /wp-admin/includes/ HTTP/1.1" 200 20996 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:30:31 +0800] "GET /wp-admin/maint/ HTTP/1.1" 200 805 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:30:31 +0800] "GET /wp-admin/maint/ HTTP/1.1" 200 805 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:30:32 +0800] "GET /wp-admin/network/ HTTP/1.1" 302 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:30:35 +0800] "GET /wp-admin/user/ HTTP/1.1" 302 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:30:39 +0800] "GET /wp-admin/css/ HTTP/1.1" 200 19544 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:30:40 +0800] "GET /wp-admin/css/ HTTP/1.1" 200 19544 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:30:41 +0800] "GET /wp-admin/css/css.php HTTP/1.1" 200 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:30:51 +0800] "GET /wp-admin/css/colors/ HTTP/1.1" 200 2763 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:30:52 +0800] "GET /wp-admin/css/colors/ HTTP/1.1" 200 2763 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:30:52 +0800] "GET /wp-admin/css/colors/colors.php HTTP/1.1" 200 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:03 +0800] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 200 1565 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:03 +0800] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 200 1569 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:04 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 200 1575 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:05 +0800] "GET /wp-admin/css/colors/light/ HTTP/1.1" 200 1567 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:05 +0800] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 200 1573 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:06 +0800] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 200 1569 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:07 +0800] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 200 1567 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:07 +0800] "GET /wp-admin/css/colors/sunrise/%20 HTTP/1.1" 301 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 72.18.130.250 - - [21/Dec/2025:10:31:10 +0800] "POST /wp-cron.php?doing_wp_cron=1766284270.4185190200805664062500 HTTP/1.1" 200 - "http://rambut.bf1.my/wp-cron.php?doing_wp_cron=1766284270.4185190200805664062500" "WordPress/5.7.14; https://rambut.bf1.my" 174.138.29.254 - - [21/Dec/2025:10:31:12 +0800] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 200 1571 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:13 +0800] "GET /wp-admin/images/ HTTP/1.1" 200 13991 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:15 +0800] "GET /wp-admin/js/ HTTP/1.1" 200 17943 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:16 +0800] "GET /wp-admin/js/widgets/ HTTP/1.1" 200 3313 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:16 +0800] "GET /wp-includes/ HTTP/1.1" 200 43200 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:20 +0800] "GET /wp-includes/ HTTP/1.1" 200 43200 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:22 +0800] "GET /wp-includes/class-wp-blog-assets.php HTTP/1.1" 200 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:23 +0800] "GET /wp-includes/class-wp-data-cache.php HTTP/1.1" 200 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:23 +0800] "GET /wp-includes/https-detection.php HTTP/1.1" 200 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:24 +0800] "GET /wp-includes/https-migration.php HTTP/1.1" 200 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:24 +0800] "GET /wp-includes/packed.php HTTP/1.1" 200 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:25 +0800] "GET /wp-includes/robots-template.php HTTP/1.1" 200 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:25 +0800] "GET /wp-includes/ID3/ HTTP/1.1" 200 4232 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:26 +0800] "GET /wp-includes/ID3/ HTTP/1.1" 200 4232 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:26 +0800] "GET /wp-includes/IXR/ HTTP/1.1" 200 2538 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:27 +0800] "GET /wp-includes/IXR/ HTTP/1.1" 200 2538 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:27 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 200 1182 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:28 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 200 1182 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:28 +0800] "GET /wp-includes/Text/ HTTP/1.1" 200 983 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:29 +0800] "GET /wp-includes/Text/ HTTP/1.1" 200 983 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:30 +0800] "GET /wp-includes/Text/Diff/ HTTP/1.1" 200 1181 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:30 +0800] "GET /wp-includes/Text/Diff/ HTTP/1.1" 200 1181 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:31 +0800] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 200 1378 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:34 +0800] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 200 1378 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:35 +0800] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 200 850 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:35 +0800] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 200 850 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:36 +0800] "GET /wp-includes/blocks/ HTTP/1.1" 200 934 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:36 +0800] "GET /wp-includes/pomo/ HTTP/1.1" 200 1706 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:37 +0800] "GET /wp-includes/pomo/ HTTP/1.1" 200 1706 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:37 +0800] "GET /wp-includes/sitemaps/ HTTP/1.1" 200 2196 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:38 +0800] "GET /wp-includes/sitemaps/ HTTP/1.1" 200 2196 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:38 +0800] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 200 1270 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:39 +0800] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 200 1270 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:39 +0800] "GET /wp-includes/widgets/ HTTP/1.1" 200 4425 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:40 +0800] "GET /wp-includes/widgets/ HTTP/1.1" 200 4425 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:41 +0800] "GET /wp-includes/css/ HTTP/1.1" 200 7959 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:41 +0800] "GET /wp-includes/css/dist/ HTTP/1.1" 200 2269 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:42 +0800] "GET /wp-includes/fonts/ HTTP/1.1" 200 1544 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:43 +0800] "GET /wp-includes/images/ HTTP/1.1" 200 5940 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:44 +0800] "GET /wp-includes/images/crystal/ HTTP/1.1" 200 2450 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:45 +0800] "GET /wp-includes/images/media/ HTTP/1.1" 200 2267 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:45 +0800] "GET /wp-includes/images/smilies/ HTTP/1.1" 200 5397 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:46 +0800] "GET /wp-includes/images/wlw/ HTTP/1.1" 200 1199 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:31:46 +0800] "GET /wp-includes/js/%20 HTTP/1.1" 301 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:32:02 +0800] "GET /wp-includes/js/codemirror/ HTTP/1.1" 200 2105 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:32:02 +0800] "GET /wp-includes/js/plupload/ HTTP/1.1" 200 2278 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 174.138.29.254 - - [21/Dec/2025:10:32:03 +0800] "GET /.well-known/ HTTP/1.1" 200 978 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 198.235.24.173 - - [21/Dec/2025:11:03:00 +0800] "GET / HTTP/1.1" 200 33563 "-" "-" 205.210.31.64 - - [21/Dec/2025:12:20:45 +0800] "GET /.well-known/security.txt HTTP/1.1" 200 311 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 72.18.130.250 - - [21/Dec/2025:12:21:31 +0800] "POST /wp-cron.php?doing_wp_cron=1766290891.0722830295562744140625 HTTP/1.1" 200 - "http://rambut.bf1.my/wp-cron.php?doing_wp_cron=1766290891.0722830295562744140625" "WordPress/5.7.14; https://rambut.bf1.my" 4.234.149.181 - - [21/Dec/2025:13:33:11 +0800] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36" 72.18.130.250 - - [21/Dec/2025:13:33:20 +0800] "POST /wp-cron.php?doing_wp_cron=1766295200.7963459491729736328125 HTTP/1.1" 200 - "http://rambut.bf1.my/wp-cron.php?doing_wp_cron=1766295200.7963459491729736328125" "WordPress/5.7.14; https://rambut.bf1.my" 4.234.149.181 - - [21/Dec/2025:14:06:48 +0800] "HEAD /wordpress HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36" 72.18.130.250 - - [21/Dec/2025:14:07:50 +0800] "POST /wp-cron.php?doing_wp_cron=1766297259.1014540195465087890625 HTTP/1.1" 200 - "http://rambut.bf1.my/wp-cron.php?doing_wp_cron=1766297259.1014540195465087890625" "WordPress/5.7.14; https://rambut.bf1.my" 216.73.216.21 - - [21/Dec/2025:15:06:41 +0800] "GET /robots.txt HTTP/1.1" 200 266 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.21 - - [21/Dec/2025:15:06:42 +0800] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 200 287650 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.21 - - [21/Dec/2025:15:06:42 +0800] "GET /wp-includes/js/jquery/ui/widget.min.js HTTP/1.1" 404 8311 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 72.18.130.250 - - [21/Dec/2025:15:06:43 +0800] "POST /wp-cron.php?doing_wp_cron=1766300803.0819220542907714843750 HTTP/1.1" 200 - "http://rambut.bf1.my/wp-cron.php?doing_wp_cron=1766300803.0819220542907714843750" "WordPress/5.7.14; https://rambut.bf1.my"