repairbizcredit.com - Faizzz-Chin ShellXploit

SHELL BYPASS 403 |

Modern UI. Responsive. Powerful.

Faizzz-Chin Shell

: /proc/thread-self/root/proc/thread-self/root/home/repauqkb/access-logs/ [ drwxr-x--- ]

49.51.243.156 - - [09/May/2026:08:23:31 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 2602:80d:1007::15 - - [09/May/2026:08:27:25 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 154.50.19.147 - - [09/May/2026:08:05:13 -0400] "POST /wp-content/plugins/backup-backup/includes/backup-heart.php HTTP/1.1" 301 795 "-" "python-requests/2.32.5" 2.56.222.14 - - [09/May/2026:09:07:55 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 2.56.222.14 - - [09/May/2026:09:07:57 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 2.56.222.14 - - [09/May/2026:09:08:13 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 2.56.222.14 - - [09/May/2026:09:09:25 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 2.56.222.14 - - [09/May/2026:09:10:02 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 2.56.222.14 - - [09/May/2026:09:10:31 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 2.56.222.14 - - [09/May/2026:09:10:50 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 2.56.222.14 - - [09/May/2026:09:11:03 -0400] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 2.56.222.14 - - [09/May/2026:09:11:10 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 2.56.222.14 - - [09/May/2026:09:11:20 -0400] "GET /wp-admin/css/colors/blue/wp-crons.wp-admin/css/colors/blue/wp-crons.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 2.56.222.14 - - [09/May/2026:09:11:35 -0400] "GET /wp-includes/blocks/calendar/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 2.56.222.14 - - [09/May/2026:09:10:18 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 2.56.222.14 - - [09/May/2026:09:11:26 -0400] "GET /wp-admin/css/colors/blue/wp-crons.wp-admin/css/colors/blue/wp-crons.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 2.56.222.14 - - [09/May/2026:09:14:22 -0400] "GET /wp-admin/css/colors/light/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 2.56.222.14 - - [09/May/2026:09:14:38 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 2.56.222.14 - - [09/May/2026:09:14:43 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 2.56.222.14 - - [09/May/2026:09:11:52 -0400] "GET /wp-admin/css/colors/blue/wp-crons.wp-admin/css/colors/blue/wp-crons.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 2.56.222.14 - - [09/May/2026:09:12:49 -0400] "GET /moduless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 2.56.222.14 - - [09/May/2026:09:13:07 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 2.56.222.14 - - [09/May/2026:09:13:39 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 2.56.222.14 - - [09/May/2026:09:14:05 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 2.56.222.14 - - [09/May/2026:09:14:27 -0400] "GET /wp-admin/css/colors/modern/lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 2.56.222.14 - - [09/May/2026:09:14:29 -0400] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 2.56.222.14 - - [09/May/2026:09:14:47 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 216.244.66.249 - - [09/May/2026:09:24:38 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; [email protected])" 198.235.24.176 - - [09/May/2026:09:33:15 -0400] "GET / HTTP/1.1" 301 795 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 51.68.111.205 - - [09/May/2026:09:45:04 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.111.205 - - [09/May/2026:10:14:53 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 2.56.222.14 - - [09/May/2026:10:53:05 -0400] "GET /wp-content/11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:06 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:06 -0400] "GET /.well-known/pki-validation/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:06 -0400] "GET /wp-content/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:07 -0400] "GET /.tmb/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:07 -0400] "GET /images/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:07 -0400] "GET /wp-content/uploads/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:07 -0400] "GET /.well-known/acme-challenge/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:07 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:07 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:08 -0400] "GET /wp-content/themes/erapress/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:08 -0400] "GET /wp-content/themes/moog/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:08 -0400] "GET /wp-content/uploads/2023/11/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:09 -0400] "GET /wp-content/uploads/2023/12/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:09 -0400] "GET /wp-content/themes/blogai/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:09 -0400] "GET /wp-content/themes/agwin/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:09 -0400] "GET /wp-content/smm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:09 -0400] "GET /jetpack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:11 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:05 -0400] "GET /fwe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:06 -0400] "GET /.well-known/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:07 -0400] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:08 -0400] "GET /wp-content/themes/freeyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:08 -0400] "GET /wp-content/plugins/doyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:08 -0400] "GET /wp-content/themes/panama/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:09 -0400] "GET /wp-content/themes/quext/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:09 -0400] "GET /wp-content/plugins/app-calendar/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:10 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:10 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:10 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:10 -0400] "GET /xltavrat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:10 -0400] "GET /.wp-back.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:10 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:11 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:11 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:11 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:11 -0400] "GET /wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:11 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:12 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:12 -0400] "GET /wp-content/data-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:13 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:13 -0400] "GET /plugins/finder/categories/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:13 -0400] "GET /thanks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:14 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:14 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:14 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:15 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:15 -0400] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:15 -0400] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:15 -0400] "GET /wp-content/themes/applica/400.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:15 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:16 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:16 -0400] "GET /wp-admin/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:16 -0400] "GET /wp-content/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:16 -0400] "GET /wp-includes/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:16 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:16 -0400] "GET /wp-admin/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:11 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:12 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:12 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:12 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:12 -0400] "GET /libraries/fof/database/iterator/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:12 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:13 -0400] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:13 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:13 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:13 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:14 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:14 -0400] "GET /wp-content/themes/mero-megazines/ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:14 -0400] "GET /wp-content/themes/welfare-charity/www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:15 -0400] "GET /wp-content/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:15 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:16 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:17 -0400] "GET /wp-includes/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:17 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:18 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:18 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:18 -0400] "GET /wp-content/plugins/wordpress-three/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:19 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:19 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:20 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:20 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:20 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:20 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:20 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:21 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:21 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:21 -0400] "GET /vendor/htmlawed/htmlawed/gel4y.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:21 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:22 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:22 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:22 -0400] "GET /gank.php.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:22 -0400] "GET /mt/pekok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:23 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:17 -0400] "GET /wp-content/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:17 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:17 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:18 -0400] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:18 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:18 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:18 -0400] "GET /wp-content/plugins/column/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:19 -0400] "GET /wp-content/plugins/wp-daft/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:19 -0400] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:19 -0400] "GET /wp-content/plugins/hellopress/0xlufix2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:20 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:21 -0400] "GET /loger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:21 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:22 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:22 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:22 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:23 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:23 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:23 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:23 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:24 -0400] "GET /wp-content/plugins/w0rdpr3ssnew/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:24 -0400] "GET /wp-content/plugins/anttt/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:25 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:25 -0400] "GET /wp-admin/x.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:25 -0400] "GET /wp-content/plugins/wpputty/wpputty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:23 -0400] "GET /wp.php?Chitoge HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:23 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:24 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:24 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:24 -0400] "GET /wp-content/plugins/xwp/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:24 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:24 -0400] "GET /wp-content/plugins/instabuilder2/cache/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:25 -0400] "GET /wp-content/plugins/wordpresss3cll/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:25 -0400] "GET /wp-content/plugins/wpyii2/wpyii2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2.56.222.14 - - [09/May/2026:10:53:26 -0400] "GET /wp-content/plugins/dos2unix/dos2unix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 109.122.197.160 - - [09/May/2026:10:57:08 -0400] "POST /?plugin=x652/x652.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:50.0) Gecko/20100101 Firefox/50.0" 185.53.76.74 - - [09/May/2026:11:05:39 -0400] "GET / HTTP/1.1" 301 795 "http://repairbizcredit.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 20.238.36.81 - - [09/May/2026:11:14:29 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:30 -0400] "GET /img.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:31 -0400] "GET /wsc.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:31 -0400] "GET /xl9.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:32 -0400] "GET /cibai.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:32 -0400] "GET /mmp.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:33 -0400] "GET /gm.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:33 -0400] "GET /eetu.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:33 -0400] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:34 -0400] "GET /wp-content/r.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:36 -0400] "GET /i6z19N.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:36 -0400] "GET /clque.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:37 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:38 -0400] "GET /xslclbn.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:38 -0400] "GET /albrt.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:40 -0400] "GET /zwq.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:40 -0400] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:40 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:42 -0400] "GET /css/shlo.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:43 -0400] "GET /acip.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:44 -0400] "GET /uploads/index.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:45 -0400] "GET /ftde.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:46 -0400] "GET /rujgeote.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:47 -0400] "GET /mamzi.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:47 -0400] "GET /kaza.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:48 -0400] "GET /rrr.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:48 -0400] "GET /img.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:48 -0400] "GET /22name.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:49 -0400] "GET /xwx1.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:30 -0400] "GET /sf.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:31 -0400] "GET /bngv.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:32 -0400] "GET /doo.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:34 -0400] "GET /wp-tymanage.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:34 -0400] "GET /ws88.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:35 -0400] "GET /yas.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:35 -0400] "GET /tymi.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:35 -0400] "GET /lolz.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:36 -0400] "GET /asd67.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:36 -0400] "GET /wp-ver.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:37 -0400] "GET /wert.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:37 -0400] "GET /ng.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:38 -0400] "GET /less.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:39 -0400] "GET /tiny2.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:39 -0400] "GET /an8.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:39 -0400] "GET /ww.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:40 -0400] "GET /55.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:41 -0400] "GET /wp-demomav.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:41 -0400] "GET /greateb.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:41 -0400] "GET /co.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:48 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [09/May/2026:11:14:49 -0400] "GET /xse.php HTTP/1.1" 301 795 "-" "-" 216.244.66.249 - - [09/May/2026:11:34:41 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; [email protected])" 95.215.32.14 - - [09/May/2026:11:40:14 -0400] "GET /index.php?option=com_acym&ctrl=frontmails&task=setNewIconShare HTTP/1.1" 301 795 "-" "ALittle Client" 216.244.66.249 - - [09/May/2026:12:18:23 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; [email protected])" 43.172.194.43 - - [09/May/2026:12:21:39 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" 2409:8a34:407f:76e0:a00:27ff:fe4f:fe90 - - [09/May/2026:12:44:32 -0400] "GET / HTTP/1.1" 301 795 "http://www.lcgrm.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 94.19.10.143 - - [09/May/2026:12:53:18 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:45.0) Gecko/20100101 Firefox/45.0" 94.19.10.143 - - [09/May/2026:12:53:37 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2856.90 Safari/537.36" 111.230.233.46 - - [09/May/2026:13:10:33 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 170.106.148.137 - - [09/May/2026:13:13:41 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 205.210.31.15 - - [09/May/2026:13:15:14 -0400] "GET / HTTP/1.1" 301 795 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 23.239.187.2 - - [09/May/2026:14:09:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:82.0) Gecko/20100101 Firefox/82.0" 216.244.66.249 - - [09/May/2026:14:30:02 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; [email protected])" 194.61.40.4 - - [09/May/2026:15:12:41 -0400] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:12:42 -0400] "GET /O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:12:42 -0400] "GET /zwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.4 - - [09/May/2026:15:12:43 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:12:43 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.40.4 - - [09/May/2026:15:12:44 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:12:44 -0400] "GET /.wp/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:12:45 -0400] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.4 - - [09/May/2026:15:12:46 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:12:46 -0400] "GET /file5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:12:48 -0400] "GET /wp-content/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:12:48 -0400] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:12:50 -0400] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.4 - - [09/May/2026:15:12:50 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.40.4 - - [09/May/2026:15:12:51 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.40.4 - - [09/May/2026:15:12:51 -0400] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:12:51 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:12:52 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:12:53 -0400] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:12:53 -0400] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:12:42 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:12:43 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:12:45 -0400] "GET /robots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.40.4 - - [09/May/2026:15:12:45 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.40.4 - - [09/May/2026:15:12:46 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.40.4 - - [09/May/2026:15:12:46 -0400] "GET /ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:12:47 -0400] "GET /f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:12:47 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:12:47 -0400] "GET /amax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:12:48 -0400] "GET /update/f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.40.4 - - [09/May/2026:15:12:49 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.40.4 - - [09/May/2026:15:12:49 -0400] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:12:49 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:12:50 -0400] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.40.4 - - [09/May/2026:15:12:51 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.40.4 - - [09/May/2026:15:12:52 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:12:53 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.40.4 - - [09/May/2026:15:12:55 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:12:56 -0400] "GET /js/bas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:12:57 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:12:57 -0400] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:12:57 -0400] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:12:58 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.4 - - [09/May/2026:15:12:59 -0400] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:13:00 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.4 - - [09/May/2026:15:13:00 -0400] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:00 -0400] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:13:01 -0400] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:01 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.40.4 - - [09/May/2026:15:13:01 -0400] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:02 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:13:02 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:02 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.40.4 - - [09/May/2026:15:13:03 -0400] "GET /cgi-bin/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.40.4 - - [09/May/2026:15:13:03 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:13:04 -0400] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:05 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.61.40.4 - - [09/May/2026:15:13:05 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:13:06 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:12:54 -0400] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:12:54 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.4 - - [09/May/2026:15:12:54 -0400] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:12:55 -0400] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:12:55 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:12:56 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.40.4 - - [09/May/2026:15:12:56 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:12:58 -0400] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:12:58 -0400] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:12:58 -0400] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:12:59 -0400] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:12:59 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.40.4 - - [09/May/2026:15:13:00 -0400] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.40.4 - - [09/May/2026:15:13:04 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.4 - - [09/May/2026:15:13:04 -0400] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:04 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:05 -0400] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:06 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:07 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:08 -0400] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:13:09 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.40.4 - - [09/May/2026:15:13:10 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:13:10 -0400] "GET /natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:11 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:11 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:12 -0400] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:13:12 -0400] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:13 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:14 -0400] "GET /wp-includes/assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:14 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.40.4 - - [09/May/2026:15:13:15 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:13:16 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:16 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:16 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.40.4 - - [09/May/2026:15:13:17 -0400] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:17 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:13:17 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:18 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:13:06 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:07 -0400] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:13:08 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:08 -0400] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.40.4 - - [09/May/2026:15:13:08 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:13:09 -0400] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.40.4 - - [09/May/2026:15:13:09 -0400] "GET /images/DJP9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:10 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.40.4 - - [09/May/2026:15:13:10 -0400] "GET /function/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.4 - - [09/May/2026:15:13:11 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:12 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.40.4 - - [09/May/2026:15:13:13 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.40.4 - - [09/May/2026:15:13:13 -0400] "GET /wp-content/languages/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:13 -0400] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.40.4 - - [09/May/2026:15:13:14 -0400] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.40.4 - - [09/May/2026:15:13:15 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.40.4 - - [09/May/2026:15:13:15 -0400] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:13:15 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:17 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:18 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:19 -0400] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:19 -0400] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:13:20 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:20 -0400] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:21 -0400] "GET /wp-content/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:21 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.40.4 - - [09/May/2026:15:13:22 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.40.4 - - [09/May/2026:15:13:22 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:23 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:24 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:13:25 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:13:25 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:13:25 -0400] "GET /wp_wlx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:25 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.40.4 - - [09/May/2026:15:13:26 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:26 -0400] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:13:28 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:28 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:29 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.40.4 - - [09/May/2026:15:13:29 -0400] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:18 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.40.4 - - [09/May/2026:15:13:19 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:13:20 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:13:20 -0400] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:21 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.40.4 - - [09/May/2026:15:13:22 -0400] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:23 -0400] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:23 -0400] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:13:23 -0400] "GET /assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:24 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:24 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:26 -0400] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:27 -0400] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:27 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:27 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:28 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:28 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:29 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.40.4 - - [09/May/2026:15:13:30 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:13:31 -0400] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.40.4 - - [09/May/2026:15:13:30 -0400] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.40.4 - - [09/May/2026:15:13:31 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:31 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:33 -0400] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.40.4 - - [09/May/2026:15:13:33 -0400] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:34 -0400] "GET /images/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:34 -0400] "GET /images/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:35 -0400] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:35 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:36 -0400] "GET /wp-content/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:37 -0400] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:37 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:13:38 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:13:38 -0400] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:13:39 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:13:39 -0400] "GET /wp-setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.40.4 - - [09/May/2026:15:13:40 -0400] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:13:41 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:42 -0400] "GET /images/index22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:32 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:13:32 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:33 -0400] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:33 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:34 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:13:35 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:35 -0400] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.40.4 - - [09/May/2026:15:13:36 -0400] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:13:37 -0400] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.61.40.4 - - [09/May/2026:15:13:38 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:38 -0400] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:39 -0400] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:40 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:40 -0400] "GET /wp-includes/infi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.61.40.4 - - [09/May/2026:15:13:41 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.40.4 - - [09/May/2026:15:13:41 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:41 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:42 -0400] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:42 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:43 -0400] "GET /assets/script.js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:44 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.61.40.4 - - [09/May/2026:15:13:44 -0400] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:44 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:45 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:45 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:13:45 -0400] "GET /cgi-bin/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:13:46 -0400] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:46 -0400] "GET /wp-includes/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.40.4 - - [09/May/2026:15:13:46 -0400] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.40.4 - - [09/May/2026:15:13:47 -0400] "GET /file2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:47 -0400] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:48 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.40.4 - - [09/May/2026:15:13:49 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:49 -0400] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:13:49 -0400] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.40.4 - - [09/May/2026:15:13:50 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:13:50 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.40.4 - - [09/May/2026:15:13:50 -0400] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.40.4 - - [09/May/2026:15:13:51 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.40.4 - - [09/May/2026:15:13:52 -0400] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.40.4 - - [09/May/2026:15:13:43 -0400] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:43 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:43 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.40.4 - - [09/May/2026:15:13:45 -0400] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:47 -0400] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.40.4 - - [09/May/2026:15:13:48 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.40.4 - - [09/May/2026:15:13:48 -0400] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:48 -0400] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.40.4 - - [09/May/2026:15:13:50 -0400] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:51 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.40.4 - - [09/May/2026:15:13:51 -0400] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:52 -0400] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:13:52 -0400] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:13:54 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:54 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:13:55 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:13:56 -0400] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.40.4 - - [09/May/2026:15:13:56 -0400] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.61.40.4 - - [09/May/2026:15:13:56 -0400] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:57 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:52 -0400] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.4 - - [09/May/2026:15:13:53 -0400] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.40.4 - - [09/May/2026:15:13:53 -0400] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:53 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.40.4 - - [09/May/2026:15:13:54 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.40.4 - - [09/May/2026:15:13:55 -0400] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:13:55 -0400] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:13:56 -0400] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:58 -0400] "GET /webadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:58 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.40.4 - - [09/May/2026:15:13:59 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.40.4 - - [09/May/2026:15:13:59 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.40.4 - - [09/May/2026:15:13:59 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:14:00 -0400] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:01 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:14:01 -0400] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:01 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.40.4 - - [09/May/2026:15:14:02 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:14:02 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:03 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:57 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:13:57 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:13:58 -0400] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:14:00 -0400] "GET /wp-admin/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.4 - - [09/May/2026:15:14:00 -0400] "GET /templates/beez3/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:02 -0400] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:14:02 -0400] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:14:04 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.61.40.4 - - [09/May/2026:15:14:06 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.4 - - [09/May/2026:15:14:06 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.40.4 - - [09/May/2026:15:14:06 -0400] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:07 -0400] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:14:07 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:07 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:08 -0400] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:14:08 -0400] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:10 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:11 -0400] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:11 -0400] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:03 -0400] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:03 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:04 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:04 -0400] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:04 -0400] "GET /blog/wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:05 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:05 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:05 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.4 - - [09/May/2026:15:14:07 -0400] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.40.4 - - [09/May/2026:15:14:08 -0400] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.40.4 - - [09/May/2026:15:14:09 -0400] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:14:09 -0400] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:10 -0400] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.40.4 - - [09/May/2026:15:14:10 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:14:11 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:11 -0400] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:12 -0400] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.40.4 - - [09/May/2026:15:14:12 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:14:13 -0400] "GET /blog/wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:13 -0400] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:14:14 -0400] "GET /blog/wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:15 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.40.4 - - [09/May/2026:15:14:15 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:15 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.40.4 - - [09/May/2026:15:14:16 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:14:16 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:14:18 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.40.4 - - [09/May/2026:15:14:19 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:14:21 -0400] "GET /setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:21 -0400] "GET /.bod/.ll/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:14:22 -0400] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:22 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:23 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.40.4 - - [09/May/2026:15:14:23 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:14:25 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:30 -0400] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:14:32 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:14:34 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:12 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:14 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:14 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.40.4 - - [09/May/2026:15:14:15 -0400] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:14:17 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:18 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:19 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:19 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:20 -0400] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:20 -0400] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.40.4 - - [09/May/2026:15:14:20 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.61.40.4 - - [09/May/2026:15:14:21 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:14:22 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:22 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:23 -0400] "GET /ab.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:28 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:14:29 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:33 -0400] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:34 -0400] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.61.40.4 - - [09/May/2026:15:14:35 -0400] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.40.4 - - [09/May/2026:15:14:35 -0400] "GET /js/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:35 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:36 -0400] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.61.40.4 - - [09/May/2026:15:14:36 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:36 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.4 - - [09/May/2026:15:14:38 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:39 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:40 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.4 - - [09/May/2026:15:14:40 -0400] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:41 -0400] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:41 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:14:42 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.40.4 - - [09/May/2026:15:14:42 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:43 -0400] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:43 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:44 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:45 -0400] "GET /.well-known/wincust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.61.40.4 - - [09/May/2026:15:14:45 -0400] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.40.4 - - [09/May/2026:15:14:45 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:46 -0400] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:14:34 -0400] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:37 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:37 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:37 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.40.4 - - [09/May/2026:15:14:37 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:38 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:14:38 -0400] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:14:39 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:14:39 -0400] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:14:39 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:40 -0400] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:41 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:42 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.61.40.4 - - [09/May/2026:15:14:43 -0400] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:44 -0400] "GET /wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:44 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:45 -0400] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:14:46 -0400] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:14:47 -0400] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:14:48 -0400] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:14:48 -0400] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:14:49 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.40.4 - - [09/May/2026:15:14:51 -0400] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.40.4 - - [09/May/2026:15:14:52 -0400] "GET /js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:14:53 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:53 -0400] "GET /worm.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.40.4 - - [09/May/2026:15:14:53 -0400] "GET /ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.40.4 - - [09/May/2026:15:14:54 -0400] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:55 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.40.42 - - [09/May/2026:15:15:05 -0400] "GET /update/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:06 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.40.42 - - [09/May/2026:15:15:06 -0400] "GET /themes/zMousse/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:07 -0400] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:07 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:07 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:08 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:15:09 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:09 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:09 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:09 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.40.4 - - [09/May/2026:15:14:46 -0400] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:47 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:47 -0400] "GET /fonts/database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:47 -0400] "GET /ff2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:49 -0400] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.4 - - [09/May/2026:15:14:50 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:50 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:50 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.40.4 - - [09/May/2026:15:14:52 -0400] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.4 - - [09/May/2026:15:14:52 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.40.4 - - [09/May/2026:15:14:54 -0400] "GET /.well-known/pki-validation/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.40.4 - - [09/May/2026:15:14:55 -0400] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.40.42 - - [09/May/2026:15:15:06 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:08 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:08 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:11 -0400] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:11 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.40.42 - - [09/May/2026:15:15:11 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:12 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.42 - - [09/May/2026:15:15:10 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.40.42 - - [09/May/2026:15:15:10 -0400] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.42 - - [09/May/2026:15:15:10 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.40.42 - - [09/May/2026:15:15:11 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:12 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:13 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.42 - - [09/May/2026:15:15:13 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:14 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:15:15 -0400] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.42 - - [09/May/2026:15:15:15 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:15 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:16 -0400] "GET /wp-includes/blocks/table/int/tmpl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:16 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:17 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:17 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.40.42 - - [09/May/2026:15:15:18 -0400] "GET /autoload_classmap/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.40.42 - - [09/May/2026:15:15:18 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:19 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:19 -0400] "GET /templates/beez/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:12 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:13 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.40.42 - - [09/May/2026:15:15:13 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:14 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:15:14 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.42 - - [09/May/2026:15:15:15 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:16 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:16 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.42 - - [09/May/2026:15:15:17 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.40.42 - - [09/May/2026:15:15:17 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.42 - - [09/May/2026:15:15:18 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:15:18 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:15:19 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.61.40.42 - - [09/May/2026:15:15:19 -0400] "GET /components/com_jea/views/form/tmpl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.40.42 - - [09/May/2026:15:15:20 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:20 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:15:21 -0400] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:15:21 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.42 - - [09/May/2026:15:15:22 -0400] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.40.42 - - [09/May/2026:15:15:22 -0400] "GET /wp-content/plugins/up/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:22 -0400] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:15:20 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:21 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:21 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:22 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:23 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:23 -0400] "GET /images/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.42 - - [09/May/2026:15:15:23 -0400] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.40.42 - - [09/May/2026:15:15:24 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.40.42 - - [09/May/2026:15:15:24 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:25 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:25 -0400] "GET /wp-content/cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.42 - - [09/May/2026:15:15:25 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:25 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:26 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.40.42 - - [09/May/2026:15:15:27 -0400] "GET /wp-content/plugins/phpadmin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:27 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.42 - - [09/May/2026:15:15:27 -0400] "GET /wp-content/plugins/view-more/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:28 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.42 - - [09/May/2026:15:15:28 -0400] "GET /blog/wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:23 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:24 -0400] "GET /wp-content/themes/twentytwentythree/patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:24 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:15:26 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.42 - - [09/May/2026:15:15:26 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:26 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:15:27 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:15:28 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.42 - - [09/May/2026:15:15:28 -0400] "GET /wp-content/plugins/ioxi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.40.42 - - [09/May/2026:15:15:29 -0400] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:15:30 -0400] "GET /wp-includes/Requests/src/Exception/Http/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:30 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:30 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:30 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:15:31 -0400] "GET /wp-content/themes/twentytwentytwo/assets/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:31 -0400] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.42 - - [09/May/2026:15:15:32 -0400] "GET /blog/wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:32 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.61.40.42 - - [09/May/2026:15:15:32 -0400] "GET /.bod/.ll/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.42 - - [09/May/2026:15:15:29 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:29 -0400] "GET /wp-content/themes/astra/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:29 -0400] "GET /wp-content/plugins/ccx/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.40.42 - - [09/May/2026:15:15:32 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.40.42 - - [09/May/2026:15:15:33 -0400] "GET /wp-content/themes/twentytwentytwo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:33 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:33 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:34 -0400] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:35 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:35 -0400] "GET /wp-includes/bk/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.40.42 - - [09/May/2026:15:15:35 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:37 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:38 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.42 - - [09/May/2026:15:15:38 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:38 -0400] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:39 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.40.42 - - [09/May/2026:15:15:39 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:40 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.42 - - [09/May/2026:15:15:40 -0400] "GET /img/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:15:33 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:34 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.40.42 - - [09/May/2026:15:15:35 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.42 - - [09/May/2026:15:15:36 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.42 - - [09/May/2026:15:15:36 -0400] "GET /wp-content/themes/hello-element/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.42 - - [09/May/2026:15:15:36 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:15:36 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.42 - - [09/May/2026:15:15:37 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:38 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:39 -0400] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:15:40 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:40 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:41 -0400] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:42 -0400] "GET /components/com_newsfeeds/models/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:43 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.40.42 - - [09/May/2026:15:15:45 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:45 -0400] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.42 - - [09/May/2026:15:15:42 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:15:43 -0400] "GET /.trash7309/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:43 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:43 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:44 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.42 - - [09/May/2026:15:15:44 -0400] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:15:44 -0400] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:44 -0400] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:45 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.40.42 - - [09/May/2026:15:15:45 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:15:46 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:46 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:47 -0400] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.42 - - [09/May/2026:15:15:47 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:47 -0400] "GET /blog/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:48 -0400] "GET /file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.42 - - [09/May/2026:15:15:48 -0400] "GET /wp-content/themes/twentytwentyfour/patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:48 -0400] "GET /images/news_event/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:48 -0400] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:49 -0400] "GET /wp-admin/js/file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:49 -0400] "GET /wp-includes/id3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:49 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:50 -0400] "GET /upload/bilder/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:50 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:51 -0400] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:51 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.40.42 - - [09/May/2026:15:15:52 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:15:52 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.40.42 - - [09/May/2026:15:15:46 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:46 -0400] "GET /wp-includes/assets/wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.42 - - [09/May/2026:15:15:47 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.42 - - [09/May/2026:15:15:49 -0400] "GET /templates/beez5/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.42 - - [09/May/2026:15:15:50 -0400] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:50 -0400] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.42 - - [09/May/2026:15:15:51 -0400] "GET /assets/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.42 - - [09/May/2026:15:15:51 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.42 - - [09/May/2026:15:15:52 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:52 -0400] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:53 -0400] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.40.42 - - [09/May/2026:15:15:53 -0400] "GET /wp-content/plugins/content-management/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:54 -0400] "GET /wp-content/themes/Avada/licensing/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:54 -0400] "GET /Requests/Utility/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:54 -0400] "GET /themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.42 - - [09/May/2026:15:15:55 -0400] "GET /wp-content/plugins/tunnelforms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.40.42 - - [09/May/2026:15:15:56 -0400] "GET /wp-includes/js/tinymce/utils/%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:58 -0400] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:53 -0400] "GET /files/shares/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:55 -0400] "GET /themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:55 -0400] "GET /rest-api/fields/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:55 -0400] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:15:56 -0400] "GET /wp-content/languages/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.40.42 - - [09/May/2026:15:15:56 -0400] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:57 -0400] "GET /themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.40.42 - - [09/May/2026:15:15:57 -0400] "GET /wp-includes/js/jquery/ui/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:57 -0400] "GET /js/tinymce/utils/%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:15:58 -0400] "GET /Requests/Exception/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:58 -0400] "GET /wp-json/wp/v2/give_forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:58 -0400] "GET /wp-content/plugins/ultimate-member/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:59 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.42 - - [09/May/2026:15:15:59 -0400] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:15:59 -0400] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.42 - - [09/May/2026:15:15:59 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:16:00 -0400] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:16:01 -0400] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:16:01 -0400] "GET /wp-content/plugins/easy-themes-manager/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.40.42 - - [09/May/2026:15:16:02 -0400] "GET /wp-includes/blocks/pullquote/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.40.42 - - [09/May/2026:15:16:00 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.61.40.42 - - [09/May/2026:15:16:00 -0400] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.42 - - [09/May/2026:15:16:01 -0400] "GET /wp-content/plugins/js-support-ticket/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:16:01 -0400] "GET /wp-content/settings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:16:02 -0400] "GET /wp-admin/images/html-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:16:03 -0400] "GET /assets/bootstrap-fileupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.42 - - [09/May/2026:15:16:04 -0400] "GET /wp-content/plugins/plugin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:16:04 -0400] "GET /wp-admin/network/cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:16:04 -0400] "GET /wp-includes/blocks/details/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.40.42 - - [09/May/2026:15:16:05 -0400] "GET /wp-includes/theme-compat/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.40.42 - - [09/May/2026:15:16:06 -0400] "GET /assets/worders_front/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:16:07 -0400] "GET /assets/jquery-ui/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:16:07 -0400] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.42 - - [09/May/2026:15:16:07 -0400] "GET /wp-content/uploads/fusion-forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:16:08 -0400] "GET /wp-content/themes/jupiter/framework/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:16:08 -0400] "GET /wp-content/themes/Avada/shortcodes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:16:09 -0400] "GET /wp-json/bricks/v1/render_element/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.40.42 - - [09/May/2026:15:16:09 -0400] "GET /wp-content/themes/service-finder/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.42 - - [09/May/2026:15:16:09 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:16:02 -0400] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.40.42 - - [09/May/2026:15:16:02 -0400] "GET /wp-includes/blocks/comments-pagination-numbers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.42 - - [09/May/2026:15:16:03 -0400] "GET /wp-admin/user/interactivity-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:16:03 -0400] "GET /wp-content/plugins/yanierin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.42 - - [09/May/2026:15:16:03 -0400] "GET /wp-content/themes/hideo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.40.42 - - [09/May/2026:15:16:04 -0400] "GET /wp-content/plugins/profile-builder/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:16:05 -0400] "GET /wp-includes/blocks/post-terms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.40.42 - - [09/May/2026:15:16:05 -0400] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.40.42 - - [09/May/2026:15:16:05 -0400] "GET /management/assets/assets/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:16:06 -0400] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.40.42 - - [09/May/2026:15:16:06 -0400] "GET /wordpress/wp-includes/blocks/accordion/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:16:07 -0400] "GET /wp-content/themes/Avada/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:16:07 -0400] "GET /wp-content/themes/Avada/includes/lib/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:16:08 -0400] "GET /wp-includes/blocks/site-title/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.40.42 - - [09/May/2026:15:16:08 -0400] "GET /wp-content/plugins/jupiterx-core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:16:09 -0400] "GET /wp-content/themes/bricks/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.40.42 - - [09/May/2026:15:16:10 -0400] "GET /wp-content/themes/service-finder/admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.40.42 - - [09/May/2026:15:16:10 -0400] "GET /wp-json/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.42 - - [09/May/2026:15:16:10 -0400] "GET /wp-json/wp/v2/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.42 - - [09/May/2026:15:16:11 -0400] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.42 - - [09/May/2026:15:16:11 -0400] "GET /wp-content/uploads/2026/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.40.42 - - [09/May/2026:15:16:11 -0400] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 43.153.7.191 - - [09/May/2026:15:23:44 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.166.164.183 - - [09/May/2026:15:33:27 -0400] "GET /.git/config HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36" 45.154.98.108 - - [09/May/2026:15:50:06 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 45.154.98.108 - - [09/May/2026:15:50:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.154.98.108 - - [09/May/2026:15:50:06 -0400] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.154.98.108 - - [09/May/2026:15:50:05 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.154.98.108 - - [09/May/2026:15:50:05 -0400] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.154.98.108 - - [09/May/2026:15:50:06 -0400] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 80.85.245.241 - - [09/May/2026:15:52:33 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.102.115.179 - - [09/May/2026:16:31:44 -0400] "GET ///wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_4 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36" 2.58.56.110 - - [09/May/2026:16:34:24 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 216.244.66.249 - - [09/May/2026:16:37:39 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; [email protected])" 2.58.56.110 - - [09/May/2026:16:34:22 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2.58.56.110 - - [09/May/2026:16:34:22 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 216.244.66.249 - - [09/May/2026:17:19:58 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; [email protected])" 43.173.175.71 - - [09/May/2026:18:17:40 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 2602:fb54:1a00::6a - - [09/May/2026:18:25:15 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" 216.244.66.249 - - [09/May/2026:18:47:04 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; [email protected])" 216.244.66.249 - - [09/May/2026:19:30:40 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; [email protected])" 193.32.126.170 - - [09/May/2026:20:02:25 -0400] "GET / HTTP/1.1" 301 795 "https://google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 216.244.66.249 - - [09/May/2026:20:14:11 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; [email protected])" 119.91.58.74 - - [09/May/2026:20:10:15 -0400] "GET / HTTP/1.1" 301 795 "https://m.baidu.com/s?word=www.vzth.cn" "mozilla/5.0 (iphone; cpu iphone os 11_0 like mac os x) applewebkit/604.1.38 (khtml, like gecko) version/11.0 mobile/15a372 safari/604.1" 80.94.95.173 - - [09/May/2026:20:48:44 -0400] "GET / HTTP/1.1" 301 795 "http://repairbizcredit.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 49.51.38.193 - - [09/May/2026:21:59:10 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 62.60.130.210 - - [09/May/2026:22:14:36 -0400] "GET /images/images/cache.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 216.244.66.249 - - [09/May/2026:22:24:04 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; [email protected])" 34.122.147.229 - - [09/May/2026:22:50:41 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:10 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:11 -0400] "GET /gifclass.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:11 -0400] "GET /bless.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:11 -0400] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:12 -0400] "GET /blurbs.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:13 -0400] "GET /abcd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:13 -0400] "GET /shelp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:14 -0400] "GET /dex.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:14 -0400] "GET //zwso.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:15 -0400] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:16 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:17 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:18 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:19 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:19 -0400] "GET /txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:20 -0400] "GET /wp-content/themes/txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:22 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 195.226.194.95 - - [09/May/2026:22:57:23 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2914.93 Safari/537.36" 34.123.170.104 - - [09/May/2026:22:51:30 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:08 -0400] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:09 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:10 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:12 -0400] "GET /akcc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:13 -0400] "GET /cord.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:14 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:16 -0400] "GET /bolt.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:17 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:18 -0400] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:19 -0400] "GET /insc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:20 -0400] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:21 -0400] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:21 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:21 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2a09:bac5:3859:278::3f:6f - - [09/May/2026:22:55:22 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 216.244.66.249 - - [09/May/2026:23:07:54 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; [email protected])" 134.112.25.31 - - [09/May/2026:23:17:08 -0400] "GET /templates/ HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 134.112.25.31 - - [09/May/2026:23:16:57 -0400] "GET /data/ HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 134.112.25.31 - - [09/May/2026:23:19:12 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 134.112.25.31 - - [09/May/2026:23:21:33 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 134.112.25.31 - - [09/May/2026:23:30:58 -0400] "GET /uploads/ HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 134.112.25.31 - - [09/May/2026:23:31:37 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 134.112.25.31 - - [09/May/2026:23:33:33 -0400] "GET /img/ HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 134.112.25.31 - - [09/May/2026:23:34:08 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 134.112.25.31 - - [09/May/2026:23:34:50 -0400] "GET /components/ HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 134.112.25.31 - - [09/May/2026:23:39:21 -0400] "GET /include/ HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.130.106.18 - - [09/May/2026:23:24:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 134.112.25.31 - - [09/May/2026:23:34:41 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 106.52.171.40 - - [09/May/2026:23:42:50 -0400] "GET / HTTP/1.1" 301 795 "https://m.baidu.com/s?word=www.vzth.cn" "mozilla/5.0 (iphone; cpu iphone os 11_0 like mac os x) applewebkit/604.1.38 (khtml, like gecko) version/11.0 mobile/15a372 safari/604.1" 134.112.25.31 - - [09/May/2026:23:46:49 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 216.244.66.249 - - [09/May/2026:23:52:44 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; [email protected])" 134.112.25.31 - - [09/May/2026:23:45:22 -0400] "GET /media/ HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 134.112.25.31 - - [09/May/2026:23:55:11 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 134.112.25.31 - - [09/May/2026:23:56:47 -0400] "GET /libraries/ HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 134.112.25.31 - - [09/May/2026:23:58:42 -0400] "GET / HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 134.112.25.31 - - [10/May/2026:00:02:24 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 64.89.160.79 - - [10/May/2026:00:09:45 -0400] "GET /index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&method=form&action=upload HTTP/1.1" 301 795 "-" "ALittle Client" 134.112.25.31 - - [10/May/2026:00:02:05 -0400] "GET /lib/ HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 134.112.25.31 - - [10/May/2026:00:10:42 -0400] "GET /sites/default/ HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 134.112.25.31 - - [10/May/2026:00:11:42 -0400] "GET /tmp/ HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.172.196.205 - - [10/May/2026:00:14:55 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 216.244.66.249 - - [10/May/2026:00:38:26 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; [email protected])" 134.112.25.31 - - [10/May/2026:00:55:14 -0400] "GET /loder.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.231.100.72 - - [10/May/2026:00:56:01 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 134.112.25.31 - - [10/May/2026:01:02:56 -0400] "GET /main.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 134.112.25.31 - - [10/May/2026:01:15:06 -0400] "GET /wp-includes/default-filters-method.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.154.98.197 - - [10/May/2026:01:17:29 -0400] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.197 - - [10/May/2026:01:17:29 -0400] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.197 - - [10/May/2026:01:17:29 -0400] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.197 - - [10/May/2026:01:17:30 -0400] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.197 - - [10/May/2026:01:17:30 -0400] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 134.112.25.31 - - [10/May/2026:01:15:06 -0400] "GET /wp-content/uploads/up.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.154.98.197 - - [10/May/2026:01:17:29 -0400] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.197 - - [10/May/2026:01:17:30 -0400] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.197 - - [10/May/2026:01:17:30 -0400] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.197 - - [10/May/2026:01:17:31 -0400] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 175.27.171.245 - - [10/May/2026:01:17:42 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 134.112.25.31 - - [10/May/2026:01:19:23 -0400] "GET /yanz.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 134.112.25.31 - - [10/May/2026:01:22:20 -0400] "GET /wp-includes/db.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 103.206.76.176 - - [10/May/2026:01:23:13 -0400] "GET /wp.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:23:19 -0400] "GET /wp-content/uploads/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:23:22 -0400] "GET /wp-includes/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:23:27 -0400] "GET /wp-content/themes/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:23:29 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:23:36 -0400] "GET /weso.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:23:43 -0400] "GET /blog/wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:23:46 -0400] "GET /site/wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:23:48 -0400] "GET /ok.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:23:53 -0400] "GET /f77.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:23:55 -0400] "GET /fw.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:24:08 -0400] "GET /wp-themes.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:24:14 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:24:16 -0400] "GET /million.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:23:21 -0400] "GET /wp-content/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:23:25 -0400] "GET /wp-admin/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:23:31 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:23:38 -0400] "GET /wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:23:39 -0400] "GET /wp/wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:23:41 -0400] "GET /wordpress/wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:23:51 -0400] "GET /st.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:23:58 -0400] "GET /lock.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:24:00 -0400] "GET /al.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:24:04 -0400] "GET /wsa.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:24:06 -0400] "GET /wong.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:24:11 -0400] "GET /gawean.PhP7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:24:26 -0400] "GET /updates.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:24:28 -0400] "GET /edit.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:24:31 -0400] "GET /thoms.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:24:21 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:24:24 -0400] "GET /oxi-rex.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:24:40 -0400] "GET /ioxi2.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:24:42 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:24:45 -0400] "GET /class-IXR-date.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:24:47 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:24:50 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 216.244.66.249 - - [10/May/2026:01:24:51 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; [email protected])" 111.67.101.208 - - [10/May/2026:01:24:53 -0400] "GET /goods.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:25:03 -0400] "GET /ms-sites.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:25:05 -0400] "GET /options-reading.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:25:09 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:25:10 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:25:13 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:25:18 -0400] "GET /ccx/index.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:24:34 -0400] "GET /menu-header.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:24:38 -0400] "GET /schallfuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:24:41 -0400] "GET /4pric.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:24:51 -0400] "GET /fm1.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:24:55 -0400] "GET /woh.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:25:02 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:25:08 -0400] "GET /edit-form-advanced.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:25:11 -0400] "GET /wp-includes/dropdown.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:25:15 -0400] "GET /alfanew.PHP7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:25:17 -0400] "GET /.well-known/pki-validation/x.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:25:23 -0400] "GET /function/function.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:25:25 -0400] "GET /index/function.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:25:33 -0400] "GET /plugin.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:25:37 -0400] "GET /obfs.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:25:39 -0400] "GET /m4r1ju4n4.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:25:26 -0400] "GET /wp-manage0.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:25:28 -0400] "GET /outpull.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:25:30 -0400] "GET /unsets.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:25:30 -0400] "GET /doc.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:25:31 -0400] "GET /file.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:25:32 -0400] "GET /license.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:25:34 -0400] "GET /content.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 134.112.25.31 - - [10/May/2026:01:25:37 -0400] "GET /wp-includes/gerrtiks.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 111.67.101.208 - - [10/May/2026:01:25:37 -0400] "GET /mariju.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:25:38 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:25:45 -0400] "GET /wp-content/themes/astra/mar.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:25:46 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:25:49 -0400] "GET /wp-content/plugins/aryabot/mari.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:25:49 -0400] "GET /wp-content/plugins/aryabot/mar.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:25:51 -0400] "GET /wp-content/plugins/yyobang/mar.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:25:53 -0400] "GET /wp-admin/css/colors/coffee/mariju.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:25:55 -0400] "GET /cgi-bin/mariju.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:26:00 -0400] "GET /wp-admin/css/colors/coffee/mari.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:26:01 -0400] "GET /wp-admin/css/colors/coffee/marijuana.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:26:03 -0400] "GET /wp-admin/css/colors/maro.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:26:05 -0400] "GET /wp-admin/css/mari.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:26:06 -0400] "GET /wp-admin/css/maro.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:26:08 -0400] "GET /wp-admin/maint/mari.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:26:09 -0400] "GET /wp-admin/mari.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:26:11 -0400] "GET /wp-includes/mari.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:26:12 -0400] "GET /images/mar.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:26:13 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:26:14 -0400] "GET /.tmb/mariju.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:26:20 -0400] "GET /alfa.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:26:24 -0400] "GET /ioxi-rex.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:25:47 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:25:52 -0400] "GET /wp-includes/sitemaps/providers/mariju.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:25:57 -0400] "GET /images/mariju.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:26:07 -0400] "GET /wp-admin/includes/mari.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:26:10 -0400] "GET /wp-content/mari.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:26:15 -0400] "GET /phpmailer.lang-sv.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:26:18 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:26:19 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:26:22 -0400] "GET /alfa2.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:26:23 -0400] "GET /alfa-priv.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:26:25 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:26:26 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:26:30 -0400] "GET /.well-known/warm.PhP7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:26:34 -0400] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:26:35 -0400] "GET /wp-admin/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:26:27 -0400] "GET /wp-include/alfa.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:26:31 -0400] "GET /.tmb/warm.PhP7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:26:31 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:26:32 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:26:36 -0400] "GET /ty.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:26:38 -0400] "GET /cong.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:26:40 -0400] "GET /x.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:26:42 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:26:43 -0400] "GET /admin.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:26:50 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:26:51 -0400] "GET /b0.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:26:56 -0400] "GET /gelay.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:26:57 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:27:00 -0400] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:27:04 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:26:36 -0400] "GET /images/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 134.112.25.31 - - [10/May/2026:01:26:41 -0400] "GET /admin/shell.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 103.206.76.176 - - [10/May/2026:01:26:44 -0400] "GET /configNRB/admin.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:26:46 -0400] "GET /wp-managee1.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:26:48 -0400] "GET /wp-manage1.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:26:55 -0400] "GET /mini.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:27:01 -0400] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:27:01 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:27:03 -0400] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:27:03 -0400] "GET /moon.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:27:06 -0400] "GET /xxl.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:27:08 -0400] "GET /wp-admin/maint/iR7SzrsOUEP.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:27:09 -0400] "GET /wp-admin/network/iR7SzrsOUEP.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:27:10 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:27:13 -0400] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:27:15 -0400] "GET /wp-includes/images/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:27:18 -0400] "GET /wp-admin/css/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:27:19 -0400] "GET /wp-includes/sodium_compat/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:27:22 -0400] "GET /wp-includes/sitemaps/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:27:24 -0400] "GET /wp-includes/blocks/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:27:26 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:27:26 -0400] "GET /wp-content/uploads/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:27:27 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:27:31 -0400] "GET /css/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:27:33 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:27:36 -0400] "GET /gecko.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:27:37 -0400] "GET /g.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:27:37 -0400] "GET /wp1010.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:27:44 -0400] "GET /install.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:27:46 -0400] "GET /min.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:27:06 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:27:08 -0400] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:27:16 -0400] "GET /wp-includes/widgets/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:27:17 -0400] "GET /wp-includes/ID3/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:27:20 -0400] "GET /wp-includes/style-engine/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:27:21 -0400] "GET /wp-includes/PHPMailer/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:27:30 -0400] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:27:33 -0400] "GET /cgi-bin/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:27:35 -0400] "GET /color.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:27:40 -0400] "GET /becks.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:27:42 -0400] "GET /about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:27:48 -0400] "GET /themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:27:58 -0400] "GET /leaf.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:27:59 -0400] "GET /lf.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:28:00 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:28:02 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:28:05 -0400] "GET /wp-conetnt/leaf.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:28:09 -0400] "GET /tempfuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:28:10 -0400] "GET /comdofuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:28:14 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:28:16 -0400] "GET /onclickfuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:28:18 -0400] "GET /chtmlfuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:28:19 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:28:21 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:28:26 -0400] "GET /log.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:28:27 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:28:31 -0400] "GET /wp-content/plugins/wordpresss3cll/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:28:32 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:28:34 -0400] "GET /ALFA_DATA/alfacgiapi/upfile.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:28:35 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:27:51 -0400] "GET /0x1949.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:27:55 -0400] "GET /owl.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:27:56 -0400] "GET /owl22.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:28:03 -0400] "GET /leaf-mailer.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:28:04 -0400] "GET /mailer.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:28:06 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:28:07 -0400] "GET /qinfofuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:28:12 -0400] "GET /userfuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:28:23 -0400] "GET /schallfuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:28:25 -0400] "GET /wp-content/uploads/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:28:29 -0400] "GET /wp-content/plugins/upload/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:28:37 -0400] "GET /wp-mini.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:28:39 -0400] "GET /b0.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:28:45 -0400] "GET /link.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:28:49 -0400] "GET /bugz.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:28:37 -0400] "GET /wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:28:42 -0400] "GET /moon.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:28:44 -0400] "GET /simple.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:28:47 -0400] "GET /plugin.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:29:00 -0400] "GET /pi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:29:02 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:29:03 -0400] "GET /cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:29:05 -0400] "GET /webdb.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:29:06 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:29:07 -0400] "GET /wp-logout.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:29:16 -0400] "GET /homeroot.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:29:17 -0400] "GET /defaults.php?pass=yt9 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:29:20 -0400] "GET /wp-configs.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:29:26 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:29:28 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:28:51 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:28:54 -0400] "GET /woh.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:28:57 -0400] "GET /include.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:28:58 -0400] "GET /edit.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:29:04 -0400] "GET /sgd.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:29:09 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:29:10 -0400] "GET /ms.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:29:12 -0400] "GET /msl.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:29:13 -0400] "GET /users.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:29:14 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:29:23 -0400] "GET /function.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:29:34 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:29:40 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:29:41 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:29:44 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:29:30 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:29:32 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:29:33 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:29:36 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:29:38 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:29:41 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:29:43 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:29:43 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:29:45 -0400] "GET /images/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:29:45 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:29:47 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:29:48 -0400] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:29:48 -0400] "GET /wp-includes/customize/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:29:51 -0400] "GET /wp-content/themes/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:29:53 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:29:55 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:29:59 -0400] "GET /images/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:30:00 -0400] "GET /css/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:30:01 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:30:03 -0400] "GET /.tmb/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:29:46 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:29:50 -0400] "GET /wp-admin/css/colors/blue/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:29:52 -0400] "GET /wp-includes/ID3/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:29:54 -0400] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:29:57 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 111.67.101.208 - - [10/May/2026:01:29:58 -0400] "GET /wp-admin/maint/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:29:58 -0400] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:30:02 -0400] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:30:04 -0400] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:30:06 -0400] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:30:06 -0400] "GET /wp-includes/random_compat/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.206.76.176 - - [10/May/2026:01:30:07 -0400] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 134.112.25.31 - - [10/May/2026:01:39:31 -0400] "GET /wp-content/uploads/leaf.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 134.112.25.31 - - [10/May/2026:01:39:43 -0400] "GET /v3n0mbig.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 134.112.25.31 - - [10/May/2026:01:51:42 -0400] "GET /haha.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 134.112.25.31 - - [10/May/2026:02:11:54 -0400] "GET /attacker.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:38 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:40 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:40 -0400] "GET /wp-content/uploads/a7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:41 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:42 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:43 -0400] "GET /wp-content/uploads/anonsec2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:45 -0400] "GET /wp-content/uploads/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:45 -0400] "GET /wp-content/uploads/cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:45 -0400] "GET /wp-content/uploads/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:45 -0400] "GET /wp-content/uploads/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:45 -0400] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:46 -0400] "GET /wp-content/uploads/files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:46 -0400] "GET /wp-content/uploads/filesman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:46 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:46 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:47 -0400] "GET /wp-content/uploads/indoxploit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:47 -0400] "GET /wp-content/uploads/input.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:47 -0400] "GET /wp-content/uploads/leafmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:47 -0400] "GET /wp-content/uploads/log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:48 -0400] "GET /wp-content/uploads/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 134.112.25.31 - - [10/May/2026:02:16:30 -0400] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 134.112.25.31 - - [10/May/2026:02:16:33 -0400] "GET /base.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:39 -0400] "GET /waychk_mxqcstvcpy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:39 -0400] "GET /a7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:39 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:41 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:42 -0400] "GET /wp-content/uploads/adminer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:43 -0400] "GET /wp-content/uploads/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:43 -0400] "GET /wp-content/uploads/b374k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:44 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:44 -0400] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:44 -0400] "GET /alamak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:46 -0400] "GET /wp-content/uploads/fomo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:47 -0400] "GET /wp-content/uploads/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:47 -0400] "GET /wp-content/uploads/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:48 -0400] "GET /wp-content/uploads/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:48 -0400] "GET /wp-content/uploads/mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:48 -0400] "GET /anonsec2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:50 -0400] "GET /wp-content/uploads/r57.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:50 -0400] "GET /backdoor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:49 -0400] "GET /wp-content/uploads/ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:49 -0400] "GET /wp-content/uploads/pas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:49 -0400] "GET /wp-content/uploads/pomo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:49 -0400] "GET /b374k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:49 -0400] "GET /wp-content/uploads/priv8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:50 -0400] "GET /wp-content/uploads/pro.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:50 -0400] "GET /wp-content/uploads/rootshell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:51 -0400] "GET /wp-content/uploads/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:51 -0400] "GET /wp-content/uploads/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:51 -0400] "GET /wp-content/uploads/webshell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:51 -0400] "GET /wp-content/uploads/wp-care.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:51 -0400] "GET /wp-content/uploads/wp-tibtok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:51 -0400] "GET /wp-content/uploads/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:51 -0400] "GET /wp-content/uploads/wso2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:51 -0400] "GET /wp-content/uploads/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:52 -0400] "GET /wp-content/uploads/xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:52 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:53 -0400] "GET /wp-includes/adminer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:53 -0400] "GET /wp-includes/backdoor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:50 -0400] "GET /wp-content/uploads/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:50 -0400] "GET /wp-content/uploads/session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:50 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:50 -0400] "GET /wp-content/uploads/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:51 -0400] "GET /wp-content/uploads/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:51 -0400] "GET /wp-content/uploads/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:52 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:52 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:53 -0400] "GET /wp-includes/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:53 -0400] "GET /wp-includes/alamak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:53 -0400] "GET /wp-includes/anonsec2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:53 -0400] "GET /cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:53 -0400] "GET /wp-includes/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:54 -0400] "GET /wp-includes/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:54 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:54 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:55 -0400] "GET /wp-includes/k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:55 -0400] "GET /wp-includes/leafmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:55 -0400] "GET /wp-includes/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:53 -0400] "GET /wp-includes/b374k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:53 -0400] "GET /wp-includes/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:53 -0400] "GET /wp-includes/cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:54 -0400] "GET /wp-includes/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:54 -0400] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:54 -0400] "GET /wp-includes/files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:54 -0400] "GET /wp-includes/filesman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:54 -0400] "GET /wp-includes/fomo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:54 -0400] "GET /wp-includes/indoxploit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:55 -0400] "GET /wp-includes/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:55 -0400] "GET /wp-includes/input.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:55 -0400] "GET /wp-includes/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:55 -0400] "GET /wp-includes/log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:56 -0400] "GET /wp-includes/pas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:56 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:56 -0400] "GET /wp-includes/priv8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:56 -0400] "GET /wp-includes/pro.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:56 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:56 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:57 -0400] "GET /wp-includes/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:55 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:55 -0400] "GET /wp-includes/mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:56 -0400] "GET /wp-includes/ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:56 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:56 -0400] "GET /wp-includes/pomo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:56 -0400] "GET /wp-includes/r57.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:56 -0400] "GET /wp-includes/rootshell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:56 -0400] "GET /wp-includes/session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:56 -0400] "GET /filesman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:57 -0400] "GET /wp-includes/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:57 -0400] "GET /fomo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:57 -0400] "GET /wp-includes/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:57 -0400] "GET /wp-includes/webshell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:19:57 -0400] "GET /wp-includes/uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:00 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:00 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:00 -0400] "GET /js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:01 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:05 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:07 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:07 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:19:57 -0400] "GET /wp-includes/wp-care.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:57 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:19:59 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:01 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:02 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:08 -0400] "GET /pas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:15 -0400] "GET /pro.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:17 -0400] "GET /session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:17 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:17 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:19 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:22 -0400] "GET /webshell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:22 -0400] "GET /wp-care.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:24 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:25 -0400] "GET /wp-content/uploads/backdoor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:29 -0400] "GET /wp-content/uploads/k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:29 -0400] "GET /wp-content/uploads/sh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:34 -0400] "GET /wp-includes/a7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:36 -0400] "GET /wp-includes/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:36 -0400] "GET /wp-includes/wp-tibtok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:36 -0400] "GET /wp-includes/wso2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:07 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:09 -0400] "GET /pomo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:10 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:15 -0400] "GET /r57.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:16 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:17 -0400] "GET /rootshell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:20 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:20 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:20 -0400] "GET /uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:22 -0400] "GET /wp-tibtok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:22 -0400] "GET /wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:22 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:23 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:24 -0400] "GET /wp-content/uploads/alamak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:30 -0400] "GET /wp-content/uploads/uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:34 -0400] "GET /wp-includes/sh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:36 -0400] "GET /wp-includes/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:36 -0400] "GET /wp-includes/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:37 -0400] "GET /.well-known/acme-challenge/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:37 -0400] "GET /.well-known/acme-challenge/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:37 -0400] "GET /.well-known/acme-challenge/wso2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:37 -0400] "GET /.well-known/acme-challenge/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:37 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:38 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:38 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:38 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:38 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:38 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:38 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:38 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:38 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:38 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:39 -0400] "GET /.well-known/acme-challenge/alamak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:39 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:39 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:39 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:39 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:39 -0400] "GET /.well-known/acme-challenge/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:39 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:39 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:36 -0400] "GET /wp-includes/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:37 -0400] "GET /.well-known/acme-challenge/webshell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:37 -0400] "GET /.well-known/acme-challenge/wp-care.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:37 -0400] "GET /.well-known/acme-challenge/wp-tibtok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:37 -0400] "GET /.well-known/acme-challenge/xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:37 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:38 -0400] "GET /wp-includes/xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:38 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:38 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:38 -0400] "GET /wp-content//wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:38 -0400] "GET /.well-known/acme-challenge/a7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:38 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:38 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:39 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:39 -0400] "GET /.well-known/acme-challenge/adminer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:39 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:39 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:39 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:40 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:40 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:39 -0400] "GET /.well-known/acme-challenge/anonsec2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:39 -0400] "GET /.well-known/acme-challenge/b374k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:40 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:40 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:40 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:40 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:40 -0400] "GET /.well-known/acme-challenge/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:40 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:40 -0400] "GET /.well-known/acme-challenge/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:40 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:40 -0400] "GET /app/static/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:40 -0400] "GET /media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:40 -0400] "GET /static/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:40 -0400] "GET /public/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:40 -0400] "GET /.well-known/acme-challenge/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /temp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:40 -0400] "GET /.well-known/acme-challenge/backdoor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:40 -0400] "GET /app/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:40 -0400] "GET /app/static/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:40 -0400] "GET /static/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:40 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:40 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:40 -0400] "GET /.well-known/acme-challenge/cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:40 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:40 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:40 -0400] "GET /storage/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:40 -0400] "GET /tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /vendor/composer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /.well-known/acme-challenge/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /wp-content/plugins/typehub/cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /wp-content/plugins/typehub/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /wp-content/plugins/typehub/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /wp-content/plugins/typehub/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /wp-content/plugins/typehub/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /wp-content/plugins/typehub/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /wp-content/plugins/typehub/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /wp-content/plugins/typehub/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /wp-content/plugins/typehub/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /wp-content/plugins/typehub/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /wp-content/plugins/typehub/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /wp-content/plugins/typehub/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /wp-content/plugins/exponent-modules/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /wp-content/plugins/exponent-modules/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /wp-content/plugins/exponent-modules/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /wp-content/plugins/exponent-modules/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /wp-content/plugins/exponent-modules/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:42 -0400] "GET /wp-content/plugins/exponent-modules/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:42 -0400] "GET /wp-content/plugins/exponent-modules/tmp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:42 -0400] "GET /wp-content/plugins/exponent-modules/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:42 -0400] "GET /wp-content/plugins/exponent-modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:42 -0400] "GET /wp-content/plugins/caldera-forms/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:42 -0400] "GET /wp-content/plugins/caldera-forms/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:42 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /wp-content/plugins/typehub/tmp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /wp-content/plugins/exponent-modules/cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /wp-content/plugins/exponent-modules/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:41 -0400] "GET /wp-content/plugins/exponent-modules/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:42 -0400] "GET /wp-content/plugins/exponent-modules/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:42 -0400] "GET /wp-content/plugins/exponent-modules/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:42 -0400] "GET /wp-content/plugins/caldera-forms/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:42 -0400] "GET /wp-content/plugins/caldera-forms/cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:42 -0400] "GET /wp-content/plugins/caldera-forms/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:42 -0400] "GET /wp-content/plugins/caldera-forms/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:42 -0400] "GET /wp-content/plugins/caldera-forms/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:42 -0400] "GET /.well-known/acme-challenge/files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:43 -0400] "GET /.well-known/acme-challenge/filesman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:43 -0400] "GET /.well-known/acme-challenge/fomo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:43 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:43 -0400] "GET /.well-known/acme-challenge/indoxploit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:44 -0400] "GET /.well-known/acme-challenge/input.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:45 -0400] "GET /.well-known/acme-challenge/k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:45 -0400] "GET /.well-known/acme-challenge/leafmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:42 -0400] "GET /wp-content/plugins/caldera-forms/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:44 -0400] "GET /.well-known/acme-challenge/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:45 -0400] "GET /.well-known/acme-challenge/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:46 -0400] "GET /.well-known/acme-challenge/log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:49 -0400] "GET /.well-known/acme-challenge/priv8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:50 -0400] "GET /.well-known/acme-challenge/pro.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:50 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:51 -0400] "GET /.well-known/acme-challenge/session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:51 -0400] "GET /.well-known/acme-challenge/sh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:51 -0400] "GET /.well-known/acme-challenge/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:52 -0400] "GET /.well-known/acme-challenge/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:52 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:52 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:53 -0400] "GET /wp-content/plugins/burst-statistics/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:53 -0400] "GET /wp-content/plugins/caldera-forms/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:53 -0400] "GET /wp-content/plugins/burst-statistics/cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:53 -0400] "GET /wp-content/plugins/burst-statistics/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:53 -0400] "GET /wp-content/plugins/tatsu/cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:53 -0400] "GET /wp-content/plugins/caldera-forms/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:46 -0400] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:46 -0400] "GET /.well-known/acme-challenge/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:47 -0400] "GET /.well-known/acme-challenge/mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:48 -0400] "GET /.well-known/acme-challenge/ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:48 -0400] "GET /.well-known/acme-challenge/pas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:48 -0400] "GET /.well-known/acme-challenge/pomo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:50 -0400] "GET /.well-known/acme-challenge/r57.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:50 -0400] "GET /.well-known/acme-challenge/rootshell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:51 -0400] "GET /.well-known/acme-challenge/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:52 -0400] "GET /.well-known/acme-challenge/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:52 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:52 -0400] "GET /.well-known/acme-challenge/uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:52 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:53 -0400] "GET /wp-content/languages/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:53 -0400] "GET /wp-content/plugins/typehub/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:53 -0400] "GET /wp-content/plugins/caldera-forms/tmp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:53 -0400] "GET /wp-content/plugins/caldera-forms/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:53 -0400] "GET /wp-content/plugins/caldera-forms/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:53 -0400] "GET /wp-content/plugins/burst-statistics/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:53 -0400] "GET /wp-content/plugins/tatsu/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:54 -0400] "GET /wp-content/plugins/tatsu/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:54 -0400] "GET /wp-content/plugins/tatsu/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:54 -0400] "GET /wp-content/plugins/tatsu/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:54 -0400] "GET /wp-content/plugins/tatsu/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:54 -0400] "GET /wp-content/plugins/caldera-forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:54 -0400] "GET /wp-content/plugins/burst-statistics/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:54 -0400] "GET /wp-content/plugins/tatsu/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:54 -0400] "GET /wp-content/themes/exponent/cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:54 -0400] "GET /wp-content/themes/exponent/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:55 -0400] "GET /wp-content/themes/exponent/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:55 -0400] "GET /wp-content/themes/exponent/tmp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:55 -0400] "GET /wp-content/themes/exponent/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:55 -0400] "GET /wp-content/themes/exponent/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:55 -0400] "GET /wp-content/plugins/burst-statistics/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:55 -0400] "GET /wp-content/cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:55 -0400] "GET /wp-content/plugins/burst-statistics/tmp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:56 -0400] "GET /wp-content/plugins/burst-statistics/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:53 -0400] "GET /wp-content/plugins/burst-statistics/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:54 -0400] "GET /wp-content/plugins/burst-statistics/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:54 -0400] "GET /wp-content/plugins/tatsu/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:54 -0400] "GET /wp-content/plugins/tatsu/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:54 -0400] "GET /wp-content/plugins/tatsu/tmp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:54 -0400] "GET /wp-content/plugins/tatsu/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:54 -0400] "GET /wp-content/plugins/tatsu/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:54 -0400] "GET /wp-content/themes/exponent/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:55 -0400] "GET /wp-content/plugins/burst-statistics/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:55 -0400] "GET /wp-content/themes/exponent/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:55 -0400] "GET /wp-content/themes/exponent/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:55 -0400] "GET /wp-content/themes/exponent/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:55 -0400] "GET /wp-content/plugins/burst-statistics/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:55 -0400] "GET /wp-content/plugins/burst-statistics/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:56 -0400] "GET /wp-content/plugins/burst-statistics/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:56 -0400] "GET /wp-content/plugins/complianz-gdpr/cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:56 -0400] "GET /wp-content/plugins/complianz-gdpr/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:57 -0400] "GET /wp-content/plugins/complianz-gdpr/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:57 -0400] "GET /wp-content/plugins/complianz-gdpr/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:56 -0400] "GET /wp-content/plugins/complianz-gdpr/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:56 -0400] "GET /wp-content/plugins/complianz-gdpr/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:57 -0400] "GET /wp-content/plugins/complianz-gdpr/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:57 -0400] "GET /wp-content/plugins/complianz-gdpr/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:57 -0400] "GET /wp-content/plugins/complianz-gdpr/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:57 -0400] "GET /wp-content/plugins/complianz-gdpr/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:57 -0400] "GET /wp-content/plugins/complianz-gdpr/tmp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:57 -0400] "GET /wp-content/plugins/complianz-gdpr/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:57 -0400] "GET /wp-content/plugins/complianz-gdpr/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:57 -0400] "GET /wp-content/plugins/be-grid/cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:57 -0400] "GET /wp-content/plugins/be-grid/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:57 -0400] "GET /wp-content/plugins/be-grid/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:58 -0400] "GET /wp-content/plugins/be-grid/tmp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:58 -0400] "GET /wp-content/plugins/be-grid/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:58 -0400] "GET /wp-content/plugins/tatsu/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:58 -0400] "GET /wp-content/themes/exponent/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:58 -0400] "GET /wp-content/themes/exponent/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:58 -0400] "GET /wp-content/themes/exponent/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:57 -0400] "GET /wp-content/plugins/complianz-gdpr/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:57 -0400] "GET /wp-content/plugins/be-grid/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:57 -0400] "GET /wp-content/plugins/be-grid/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:57 -0400] "GET /wp-content/plugins/be-grid/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:58 -0400] "GET /wp-content/plugins/be-grid/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:58 -0400] "GET /wp-content/plugins/be-grid/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:58 -0400] "GET /wp-content/plugins/be-grid/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:58 -0400] "GET /wp-content/plugins/be-grid/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:58 -0400] "GET /wp-content/plugins/be-grid/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:58 -0400] "GET /wp-content/plugins/be-grid/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:58 -0400] "GET /wp-content/plugins/tatsu/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.245.63.168 - - [10/May/2026:02:20:58 -0400] "GET /wp-content/themes/exponent/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 157.245.63.168 - - [10/May/2026:02:20:58 -0400] "GET /wp-content/uploads/tmp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.245.63.168 - - [10/May/2026:02:20:58 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15"