| Server IP : 103.4.122.14 / Your IP : 216.73.216.103 Web Server : Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips System : Linux cwp2.slnet.com.au 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64 User : statewid ( 1251) PHP Version : 8.3.31 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /usr/local/apache/domlogs/ |
Upload File : |
91.92.243.241 - - [01/Apr/2026:05:14:54 +0800] "GET /license.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0" 172.213.216.93 - - [01/Apr/2026:06:17:27 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:27 +0800] "GET /sw.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:27 +0800] "GET /CDX2.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:27 +0800] "GET /CDX1.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:28 +0800] "GET /fsgdjkl.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:28 +0800] "GET /ahutr.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:28 +0800] "GET /byrgo.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:28 +0800] "GET /abouta.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:29 +0800] "GET /zfe.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:29 +0800] "GET /by.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:30 +0800] "GET /Cap.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:31 +0800] "GET /wp-asudo.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:31 +0800] "GET /wp-moonka.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:31 +0800] "GET /000.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:31 +0800] "GET /zlnckdxn.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:32 +0800] "GET /wp-thi.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:32 +0800] "GET /press.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:32 +0800] "GET /aa.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:32 +0800] "GET /Geforce.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:33 +0800] "GET /jlex.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:33 +0800] "GET /dichku.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:33 +0800] "GET /t00l.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:33 +0800] "GET /vvedr.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:33 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:34 +0800] "GET /gptsh.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:34 +0800] "GET /albin.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:34 +0800] "GET /htto.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:34 +0800] "GET /xhejulap.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:35 +0800] "GET /66.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:35 +0800] "GET /8pewqMTX.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:35 +0800] "GET /ddpxi.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:35 +0800] "GET /cdkfu.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:36 +0800] "GET /IcC7p.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:36 +0800] "GET /dropdown.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:36 +0800] "GET /Jcrop.php HTTP/1.1" 403 261 "-" "-" 172.213.216.93 - - [01/Apr/2026:06:17:36 +0800] "GET /wp-temp.php HTTP/1.1" 403 261 "-" "-" 20.116.48.67 - - [01/Apr/2026:06:32:31 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 199 "-" "-" 20.116.48.67 - - [01/Apr/2026:06:32:32 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 199 "-" "-" 20.116.48.67 - - [01/Apr/2026:06:32:34 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 199 "-" "-" 20.116.48.67 - - [01/Apr/2026:06:32:35 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 199 "-" "-" 104.168.98.195 - - [01/Apr/2026:06:42:17 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 204.199.12.168 - - [01/Apr/2026:06:45:01 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.43" 45.237.164.65 - - [01/Apr/2026:06:45:06 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.43" 20.116.48.67 - - [01/Apr/2026:08:24:13 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 199 "-" "-" 20.116.48.67 - - [01/Apr/2026:08:24:15 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 199 "-" "-" 20.116.48.67 - - [01/Apr/2026:08:24:17 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 199 "-" "-" 20.116.48.67 - - [01/Apr/2026:08:24:19 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 199 "-" "-" 20.203.130.156 - - [01/Apr/2026:09:11:35 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.203.130.156 - - [01/Apr/2026:09:11:36 +0800] "GET /CDX2.php HTTP/1.1" 403 261 "-" "-" 20.203.130.156 - - [01/Apr/2026:09:11:36 +0800] "GET /CDX1.php HTTP/1.1" 403 261 "-" "-" 74.7.244.26 - - [01/Apr/2026:09:12:55 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 195.178.110.64 - - [01/Apr/2026:09:51:02 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:52 +0800] "GET /aa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:52 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:52 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:53 +0800] "GET /buy.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:53 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:53 +0800] "GET /edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:53 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:53 +0800] "GET /flower.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:53 +0800] "GET /images/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:53 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:55 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:55 +0800] "GET /nc4.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:55 +0800] "GET /xleet.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:55 +0800] "GET /wp-admin/includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:55 +0800] "GET /wp-content/upgrade/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:56 +0800] "GET /wp-content/uploads/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:56 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:56 +0800] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:56 +0800] "GET /wp-includes/style-engine/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:56 +0800] "GET /xmrlpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:56 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:56 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:57 +0800] "GET /alfa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:57 +0800] "GET /asasx.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:57 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:57 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:57 +0800] "GET /cong.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:57 +0800] "GET /file2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:57 +0800] "GET /moon.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:58 +0800] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:58 +0800] "GET /wp-content/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:58 +0800] "GET /wp-content/plugins/yanierin/akcc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:58 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:58 +0800] "GET /wp-content/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:58 +0800] "GET /wp-cron.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:58 +0800] "GET /wp-includes/IXR/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:59 +0800] "GET /wp-includes/block-supports/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:59 +0800] "GET /wp-includes/fonts/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:59 +0800] "GET /wp-includes/fonts/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:38:59 +0800] "GET /wp-includes/js/crop/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:39:00 +0800] "GET /wp-includes/rest-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.46.233.222 - - [01/Apr/2026:12:39:00 +0800] "GET /wp-includes/widgets/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.7.244.17 - - [01/Apr/2026:15:11:37 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 158.158.51.104 - - [01/Apr/2026:21:14:30 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:30 +0800] "GET /pass4.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:30 +0800] "GET /8daf1238_1774208172.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:31 +0800] "GET /0yellow.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:31 +0800] "GET /dichku.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:31 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:31 +0800] "GET /gvg1bvpsgtot1rpklCdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:32 +0800] "GET /Ov-Simple1.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:32 +0800] "GET /a9.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:32 +0800] "GET /file61.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:32 +0800] "GET /qiumnpor3orjwr6me3zmgqCdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:33 +0800] "GET /hnphq.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:33 +0800] "GET /b4txckoieeyhynhsrpi9lCdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:33 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:34 +0800] "GET /jlex.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:34 +0800] "GET /wp-class-20260318124352.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:34 +0800] "GET /5xkfgawzejgwqh9hiaznCdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:34 +0800] "GET /Okxob.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:35 +0800] "GET /q7lhrgzoo7ijhnkcedq2Cdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:35 +0800] "GET /kthusnjbc8ab0jiryls2jinCdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:35 +0800] "GET /only.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:35 +0800] "GET /repurify.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:36 +0800] "GET /tdsaz.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:36 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:36 +0800] "GET /hfles.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:36 +0800] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:37 +0800] "GET /byrgo.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:37 +0800] "GET /wp-class-20260318122951.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:37 +0800] "GET /lupo.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:37 +0800] "GET /wp-moonka.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:37 +0800] "GET /zoper1.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:38 +0800] "GET /ta0ol.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:38 +0800] "GET /irpl4xz4fmlzm4tlvvu4h1mCdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:38 +0800] "GET /wmore1.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:38 +0800] "GET /tx79.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:39 +0800] "GET /ibcqocdtu3eovdx2hwj7Cdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:39 +0800] "GET /less.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:39 +0800] "GET /t2gorhwasq4vioshtatw5eCdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:39 +0800] "GET /new3.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:40 +0800] "GET /xy.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:40 +0800] "GET /rogsa.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:40 +0800] "GET /htzevfl4k9ey5hoaywdwiCdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:40 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:41 +0800] "GET /nhj6t74aqmkde3hgpCdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:41 +0800] "GET /wlld5fjtdpjmjhsds3qzmipfCdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:41 +0800] "GET /ogifomnzqnlvwh5womfjirvaCdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:41 +0800] "GET /CDX1.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:42 +0800] "GET /ynjli.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:42 +0800] "GET /a6.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:42 +0800] "GET /mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:42 +0800] "GET /sts.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:43 +0800] "GET /hbvdoz7cy9k6xge9zhuvkvitCdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:43 +0800] "GET /wziar1.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:43 +0800] "GET /fsgdjkl.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:43 +0800] "GET /exhds0ucw0ju9vjgasxqCdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:44 +0800] "GET /CDX2.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:44 +0800] "GET /a8.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:44 +0800] "GET /lmutxdvyp7u5yksqke8ozbjgCdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:44 +0800] "GET /ortasekerli1.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:45 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:45 +0800] "GET /index-20260330022921.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:45 +0800] "GET /Geforce.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:45 +0800] "GET /press.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:46 +0800] "GET /wp-ccv.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:46 +0800] "GET /luyuc.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:46 +0800] "GET /bless.php HTTP/1.1" 403 261 "-" "-" 158.158.51.104 - - [01/Apr/2026:21:14:46 +0800] "GET /htto.php HTTP/1.1" 403 261 "-" "-" 20.104.69.172 - - [01/Apr/2026:23:59:09 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 199 "-" "-" 20.104.69.172 - - [01/Apr/2026:23:59:09 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 199 "-" "-" 20.104.69.172 - - [01/Apr/2026:23:59:10 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 199 "-" "-" 20.104.69.172 - - [01/Apr/2026:23:59:10 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 199 "-" "-" 216.144.229.127 - - [02/Apr/2026:01:20:05 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.248.113.81 - - [02/Apr/2026:01:54:09 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 74.248.113.81 - - [02/Apr/2026:01:54:09 +0800] "GET /wp-Blogs.php HTTP/1.1" 403 261 "-" "-" 138.246.253.24 - - [02/Apr/2026:04:30:40 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 20.111.63.125 - - [02/Apr/2026:04:56:02 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.111.63.125 - - [02/Apr/2026:04:56:03 +0800] "GET /wp-Blogs.php HTTP/1.1" 403 261 "-" "-" 34.61.68.108 - - [02/Apr/2026:05:07:59 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1667.0 Safari/537.36" 89.222.112.31 - - [02/Apr/2026:07:26:26 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 74.7.227.182 - - [02/Apr/2026:10:05:02 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.244.17 - - [02/Apr/2026:10:05:02 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.227.187 - - [02/Apr/2026:10:12:10 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.244.26 - - [02/Apr/2026:10:12:15 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.244.26 - - [02/Apr/2026:11:39:24 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.244.17 - - [03/Apr/2026:01:09:57 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 34.24.111.171 - - [03/Apr/2026:03:18:07 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "-" 20.63.47.115 - - [03/Apr/2026:03:49:26 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.63.47.115 - - [03/Apr/2026:03:49:26 +0800] "GET /less.php HTTP/1.1" 403 261 "-" "-" 74.7.244.26 - - [03/Apr/2026:06:43:46 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 20.63.60.10 - - [03/Apr/2026:06:47:12 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.63.60.10 - - [03/Apr/2026:06:47:12 +0800] "GET /less.php HTTP/1.1" 403 261 "-" "-" 20.63.60.10 - - [03/Apr/2026:06:47:12 +0800] "GET /ftde.php HTTP/1.1" 403 261 "-" "-" 138.246.253.24 - - [03/Apr/2026:13:47:35 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 91.224.92.190 - - [03/Apr/2026:14:59:32 +0800] "HEAD / HTTP/1.1" 403 - "-" "python-requests/2.32.5" 91.224.92.190 - - [03/Apr/2026:14:59:33 +0800] "HEAD / HTTP/1.1" 403 - "-" "python-requests/2.32.5" 91.224.92.190 - - [03/Apr/2026:14:59:33 +0800] "HEAD / HTTP/1.1" 403 - "-" "python-requests/2.32.5" 91.224.92.190 - - [03/Apr/2026:14:59:34 +0800] "HEAD / HTTP/1.1" 403 - "-" "python-requests/2.32.5" 104.194.196.199 - - [03/Apr/2026:16:08:12 +0800] "HEAD / HTTP/1.1" 403 - "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 104.143.88.34 - - [03/Apr/2026:16:08:12 +0800] "HEAD / HTTP/1.1" 403 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.62 Mobile/15E148 Safari/604.1" 104.194.196.199 - - [03/Apr/2026:16:08:13 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 104.143.88.34 - - [03/Apr/2026:16:08:13 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.62 Mobile/15E148 Safari/604.1" 172.121.217.232 - - [03/Apr/2026:16:08:23 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.2; rv:109.0) Gecko/20100101 Firefox/121.0" 172.121.216.238 - - [03/Apr/2026:16:08:23 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/121.0" 172.121.217.232 - - [03/Apr/2026:16:08:24 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.2; rv:109.0) Gecko/20100101 Firefox/121.0" 172.121.216.238 - - [03/Apr/2026:16:08:24 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/121.0" 172.121.217.232 - - [03/Apr/2026:16:08:25 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.2; rv:109.0) Gecko/20100101 Firefox/121.0" 172.121.216.238 - - [03/Apr/2026:16:08:25 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/121.0" 192.177.58.47 - - [03/Apr/2026:16:08:27 +0800] "HEAD / HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36" 172.121.221.136 - - [03/Apr/2026:16:08:27 +0800] "HEAD / HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" 172.121.220.216 - - [03/Apr/2026:16:08:28 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" 45.5.67.159 - - [03/Apr/2026:16:08:29 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" 172.121.209.180 - - [03/Apr/2026:16:08:30 +0800] "GET / HTTP/1.1" 403 261 "-" "python-requests/2.31.0" 172.121.217.8 - - [03/Apr/2026:16:08:30 +0800] "GET / HTTP/1.1" 403 261 "-" "python-requests/2.31.0" 172.121.219.35 - - [03/Apr/2026:16:08:31 +0800] "HEAD / HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36" 172.121.216.178 - - [03/Apr/2026:16:08:32 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36" 104.168.40.161 - - [03/Apr/2026:16:08:32 +0800] "HEAD / HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" 172.121.219.110 - - [03/Apr/2026:16:08:34 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36" 104.232.199.208 - - [03/Apr/2026:16:08:34 +0800] "HEAD / HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" 104.168.124.114 - - [03/Apr/2026:16:08:33 +0800] "GET / HTTP/1.1" 403 261 "-" "python-requests/2.31.0" 172.121.216.69 - - [03/Apr/2026:16:08:35 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36" 104.168.124.198 - - [03/Apr/2026:16:08:35 +0800] "GET / HTTP/1.1" 403 261 "-" "python-requests/2.31.0" 104.224.66.221 - - [03/Apr/2026:16:08:35 +0800] "GET / HTTP/1.1" 403 261 "-" "python-requests/2.31.0" 172.121.220.41 - - [03/Apr/2026:16:08:36 +0800] "HEAD / HTTP/1.1" 403 - "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 104.168.124.76 - - [03/Apr/2026:16:08:36 +0800] "HEAD / HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36" 104.143.88.118 - - [03/Apr/2026:16:08:36 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36" 104.194.196.57 - - [03/Apr/2026:16:08:37 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36" 103.105.167.233 - - [03/Apr/2026:16:08:37 +0800] "GET / HTTP/1.1" 403 261 "-" "python-requests/2.31.0" 104.165.105.69 - - [03/Apr/2026:16:08:38 +0800] "GET / HTTP/1.1" 403 261 "-" "python-requests/2.31.0" 172.121.208.224 - - [03/Apr/2026:16:08:38 +0800] "HEAD / HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36" 172.121.220.107 - - [03/Apr/2026:16:08:39 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" 104.143.88.4 - - [03/Apr/2026:16:08:39 +0800] "GET / HTTP/1.1" 403 261 "-" "python-requests/2.31.0" 35.88.157.164 - - [03/Apr/2026:16:08:40 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 35.88.157.164 - - [03/Apr/2026:16:08:41 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "https://test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 35.86.1.21 - - [03/Apr/2026:16:08:43 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 35.86.1.21 - - [03/Apr/2026:16:08:43 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "https://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 66.132.195.39 - - [03/Apr/2026:18:11:00 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 20.250.14.170 - - [04/Apr/2026:00:45:12 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:13 +0800] "GET /asd67.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:13 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:13 +0800] "GET /rithin.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:13 +0800] "GET /gpt-sh.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:14 +0800] "GET /gifclass.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:14 +0800] "GET /gifclass4.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:14 +0800] "GET /wp-content/packed.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:14 +0800] "GET /wolv2.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:15 +0800] "GET /wp-load.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:15 +0800] "GET /p.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:15 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:15 +0800] "GET /n.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:17 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:17 +0800] "GET /new4.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:17 +0800] "GET /r4f_1.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:18 +0800] "GET /wp-admin/maint/wp-is.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:18 +0800] "GET /class.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:18 +0800] "GET /bless11.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:18 +0800] "GET /o.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:19 +0800] "GET /a.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:19 +0800] "GET /system_log.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:19 +0800] "GET /wp-content/ssd/sallu.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:19 +0800] "GET /a2.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:19 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:20 +0800] "GET /css.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:20 +0800] "GET /file32.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:20 +0800] "GET /nope.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:20 +0800] "GET /js.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:21 +0800] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 403 199 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:21 +0800] "GET /num.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:21 +0800] "GET /mah.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:22 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:22 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:22 +0800] "GET /wfile.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:22 +0800] "GET /ok.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:23 +0800] "GET /sid3.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:23 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:23 +0800] "GET /filemanager.php HTTP/1.1" 403 199 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:24 +0800] "GET /123.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:24 +0800] "GET /wp-links-opml.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:24 +0800] "GET /wp-content/uploads/wp.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:24 +0800] "GET /moon.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:24 +0800] "GET /33.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:25 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:25 +0800] "GET /shell.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:25 +0800] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:25 +0800] "GET /wp-x7.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:26 +0800] "GET /log.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:26 +0800] "GET /v4.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:26 +0800] "GET /f6.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:26 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:27 +0800] "GET /an7.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:27 +0800] "GET /wp-gr.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:27 +0800] "GET /wp-includes/style-engine/index.php HTTP/1.1" 403 199 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:28 +0800] "GET /update/f35.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:28 +0800] "GET /ext.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:28 +0800] "GET /about3.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:28 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:28 +0800] "GET /zwso.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:29 +0800] "GET /alfa.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:29 +0800] "GET /fm.php HTTP/1.1" 403 199 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:29 +0800] "GET /ahax.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:30 +0800] "GET /g.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:30 +0800] "GET /0x.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:30 +0800] "GET /app/webroot/filemanager.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:30 +0800] "GET /wp-includes/IXR/about.php HTTP/1.1" 403 199 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:31 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:31 +0800] "GET /flower.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:31 +0800] "GET /public/filemanager.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:32 +0800] "GET /wp-content/voga/sallu.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:32 +0800] "GET /dlu.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:32 +0800] "GET /555.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:32 +0800] "GET /wp-mail.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:32 +0800] "GET /403.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:33 +0800] "GET /tox.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:33 +0800] "GET /lv.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:33 +0800] "GET /hook.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:33 +0800] "GET /menu.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:34 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:34 +0800] "GET /v.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:34 +0800] "GET /te.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:34 +0800] "GET /bless.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:35 +0800] "GET /12.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:35 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:35 +0800] "GET /bolt.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:35 +0800] "GET /lock360.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:36 +0800] "GET /public/manager.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:36 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:36 +0800] "GET /ol.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:36 +0800] "GET /v2.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:36 +0800] "GET /wp-admin/admin-post.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:37 +0800] "GET /shoha.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:37 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:37 +0800] "GET /new.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:37 +0800] "GET /666.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:38 +0800] "GET /akcc.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:38 +0800] "GET /mo.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:38 +0800] "GET /doc.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:39 +0800] "GET /inde.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:39 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:39 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:39 +0800] "GET /zxin.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:40 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:40 +0800] "GET /NewFile.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:40 +0800] "GET /aa.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:40 +0800] "GET //wolv2.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:41 +0800] "GET /geck.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:41 +0800] "GET /xtt.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:41 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:42 +0800] "GET /system.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:42 +0800] "GET /manager.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:42 +0800] "GET /gdn.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:42 +0800] "GET /ton.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:43 +0800] "GET /media.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:43 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:43 +0800] "GET /admir.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:43 +0800] "GET /fs.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:44 +0800] "GET /error.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:45 +0800] "GET /wp-admin/css/colour.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:45 +0800] "GET /cc.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:46 +0800] "GET /bkxzo.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:46 +0800] "GET /lo.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:46 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:46 +0800] "GET /layout.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:47 +0800] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:47 +0800] "GET /lmutxdvyp7u5yksqke8ozbjgCdefault.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:47 +0800] "GET /content.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:47 +0800] "GET /wp-configs.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:47 +0800] "GET /yas.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:48 +0800] "GET /file5.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:48 +0800] "GET /v3.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:48 +0800] "GET /wp-admin/maint/index.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:48 +0800] "GET /gg.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:49 +0800] "GET /wp-content/upgrade/index.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:49 +0800] "GET /himu.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:49 +0800] "GET /z.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:49 +0800] "GET /png.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:50 +0800] "GET /mds.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:50 +0800] "GET /acp.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:50 +0800] "GET /m.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:50 +0800] "GET /wp-is.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:51 +0800] "GET /file15.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:51 +0800] "GET /wsd.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:51 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:51 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:51 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:52 +0800] "GET /lol.php HTTP/1.1" 403 261 "-" "-" 20.250.14.170 - - [04/Apr/2026:00:45:52 +0800] "GET /radio.php HTTP/1.1" 403 261 "-" "-" 74.7.244.26 - - [04/Apr/2026:08:04:08 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 89.222.112.31 - - [04/Apr/2026:10:01:10 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 74.7.244.17 - - [04/Apr/2026:11:16:35 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.227.182 - - [04/Apr/2026:11:16:35 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 108.130.165.10 - - [04/Apr/2026:12:26:40 +0800] "GET / HTTP/1.0" 403 261 "-" "Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; +info@netcraft.com)" 65.87.7.61 - - [04/Apr/2026:18:00:35 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 47.128.96.129 - - [04/Apr/2026:21:07:07 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "-" 47.128.96.173 - - [04/Apr/2026:21:11:38 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" 120.154.27.110 - - [04/Apr/2026:21:15:24 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 8.0.0; SM-J330G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 EdgA/114.0.1823.74" 49.195.113.39 - - [04/Apr/2026:21:15:26 +0800] "GET / HTTP/1.1" 403 261 "http://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (Linux; Android 15; SM-S721B Build/AP3A.240905.015.A2; ) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/140.0.7339.119 Mobile Safari/537.36 MetaIAB" 159.196.170.123 - - [04/Apr/2026:21:15:28 +0800] "GET / HTTP/1.1" 403 261 "https://www.bing.com.au/" "Mozilla/5.0 (Linux; Android 14; SM-A528B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Mobile Safari/537.36" 180.235.108.233 - - [04/Apr/2026:21:15:30 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/26.0 Chrome/122.0.0.0 Mobile Safari/537.36" 124.187.138.78 - - [04/Apr/2026:21:15:32 +0800] "GET / HTTP/1.1" 403 261 "https://www.google.com.au/" "Mozilla/5.0 (Linux; Android 14; Pixel 6 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.119 Mobile Safari/537.36 OPR/81.2.4292.78581" 1.40.156.217 - - [04/Apr/2026:21:15:38 +0800] "GET / HTTP/1.1" 403 261 "https://thegreenscapecollective.com.au/" "Mozilla/5.0 (Linux; Android 14; Pixel 6 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.119 Mobile Safari/537.36 OPR/81.2.4292.78581" 112.141.148.144 - - [04/Apr/2026:21:15:40 +0800] "GET / HTTP/1.1" 403 261 "https://www.bing.com.au/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Mobile Safari/537.36 EdgA/127.0.0.0" 1.146.126.34 - - [04/Apr/2026:21:15:48 +0800] "GET / HTTP/1.1" 403 261 "https://thegreenscapecollective.com.au/" "Mozilla/5.0 (Linux; Android 13; SM-A032F Build/TP1A.220624.014) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.7258.158 Mobile Safari/537.36" 58.84.89.208 - - [04/Apr/2026:21:15:52 +0800] "GET / HTTP/1.1" 403 261 "https://www.google.com.au/" "Mozilla/5.0 (Linux; Android 15; SM-S901U Build/AP3A.240905.015.A2; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36 BingSapphire/32.3.430811006" 159.196.168.111 - - [04/Apr/2026:21:15:53 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 7; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36" 220.245.8.27 - - [04/Apr/2026:21:15:58 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 13; SM-S908B Build/QP1A.190711.020) AppleWebKit/570.44 (KHTML, like Gecko) Firefox/102.0.44.83 Mobile Safari/570.29" 114.73.136.142 - - [04/Apr/2026:21:16:05 +0800] "GET / HTTP/1.1" 403 261 "https://thegreenscapecollective.com.au/" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Mobile Safari/537.36 (compatible; Google-InspectionTool/1.0)" 20.199.97.195 - - [05/Apr/2026:04:19:10 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.199.97.195 - - [05/Apr/2026:04:19:10 +0800] "GET /prosell2.php HTTP/1.1" 403 261 "-" "-" 74.7.244.26 - - [05/Apr/2026:04:46:12 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.227.187 - - [05/Apr/2026:04:46:12 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 68.221.137.197 - - [05/Apr/2026:11:59:42 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 68.221.137.197 - - [05/Apr/2026:11:59:42 +0800] "GET /RIP.php HTTP/1.1" 403 261 "-" "-" 172.213.234.56 - - [05/Apr/2026:14:12:30 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 172.213.234.56 - - [05/Apr/2026:14:12:30 +0800] "GET /RIP.php HTTP/1.1" 403 261 "-" "-" 34.142.251.255 - - [05/Apr/2026:19:59:11 +0800] "HEAD / HTTP/1.1" 403 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 74.7.244.17 - - [06/Apr/2026:01:16:38 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 4.232.94.26 - - [06/Apr/2026:14:49:08 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:08 +0800] "GET /gptsh.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:09 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:09 +0800] "GET //admina.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:09 +0800] "GET /turkshell.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:09 +0800] "GET /esp.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:10 +0800] "GET /tea.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:10 +0800] "GET /bypltspd.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:10 +0800] "GET /qqa.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:10 +0800] "GET /bogles.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:11 +0800] "GET /seo.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:11 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:11 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:11 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:12 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:12 +0800] "GET /3.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:12 +0800] "GET /4.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:12 +0800] "GET /5.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:12 +0800] "GET /6.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:13 +0800] "GET /9.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:13 +0800] "GET /10.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:13 +0800] "GET /.mopj.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:14 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:14 +0800] "GET /nano.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:14 +0800] "GET /f35_S.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:15 +0800] "GET /2026w.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:15 +0800] "GET /file31.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:15 +0800] "GET /111.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:15 +0800] "GET /control.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:16 +0800] "GET /1111.php?p= HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:16 +0800] "GET //fetch.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:16 +0800] "GET /wp1.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:16 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:17 +0800] "GET /byrgo.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:17 +0800] "GET //xwpg.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:17 +0800] "GET /ass.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:17 +0800] "GET //about.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:18 +0800] "GET /no18.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:18 +0800] "GET /fine.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:18 +0800] "GET /zample.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:18 +0800] "GET /read.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:19 +0800] "GET /wp-kd4xalrg7m.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:19 +0800] "GET /hplfuns.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:19 +0800] "GET /xa.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:19 +0800] "GET //admin.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:20 +0800] "GET //wp-mter.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:20 +0800] "GET /inege.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:20 +0800] "GET /19.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:21 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:21 +0800] "GET /file61.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:21 +0800] "GET /uuu.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:21 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:22 +0800] "GET /eee.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:22 +0800] "GET /no1.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:22 +0800] "GET /w2025.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:22 +0800] "GET /swallowable.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:23 +0800] "GET /fvvff.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:23 +0800] "GET /a2.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:23 +0800] "GET //edit.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:23 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:24 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:24 +0800] "GET /66.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:24 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:24 +0800] "GET /ol.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:25 +0800] "GET //f6.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:25 +0800] "GET //inputs.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:25 +0800] "GET /style.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:25 +0800] "GET //aa.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:26 +0800] "GET //av.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:26 +0800] "GET /wp-admin/css/bolt.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:26 +0800] "GET /bless4.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:26 +0800] "GET /wp-act.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:27 +0800] "GET /xqq.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:27 +0800] "GET /plss3.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:27 +0800] "GET /aaa.php?p= HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:27 +0800] "GET /classwithtostring.php?p= HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:28 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:28 +0800] "GET /tinyfilemanager.php?p= HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:28 +0800] "GET /wp-update.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:28 +0800] "GET /sbhu.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:29 +0800] "GET /wp-blog.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:29 +0800] "GET //wp-includes/js/jquery/ HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:29 +0800] "GET //wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:30 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:30 +0800] "GET //adminfuns.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:30 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:30 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:31 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:31 +0800] "GET //cgi-bin/index.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:31 +0800] "GET /fff.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:31 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:32 +0800] "GET /we.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:32 +0800] "GET /alpha.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:32 +0800] "GET /makeasmtp.php?p= HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:32 +0800] "GET /wp-michan.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:33 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:33 +0800] "GET //wp-includes/css/dist/ HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:33 +0800] "GET /BDKR28WP.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:33 +0800] "GET //wp-includes/l10n/ HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:34 +0800] "GET /wen.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:34 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:35 +0800] "GET /wp-admin/js/fi.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:35 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:35 +0800] "GET /kj.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:35 +0800] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:36 +0800] "GET /av.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:36 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:36 +0800] "GET /about2.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:36 +0800] "GET /fi.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:37 +0800] "GET //a1.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:37 +0800] "GET /update/f35.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:37 +0800] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 199 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:38 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:38 +0800] "GET //wp-includes/css/index.php?p= HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:38 +0800] "GET /wp-includes/SimplePie/ HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:38 +0800] "GET /prv8.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:39 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:39 +0800] "GET /dev.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:39 +0800] "GET /bal.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:39 +0800] "GET /in.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:40 +0800] "GET /gssdd.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:40 +0800] "GET /motu.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:40 +0800] "GET /bs1.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:40 +0800] "GET /bengi.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:41 +0800] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:41 +0800] "GET /axx.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:41 +0800] "GET /alfashell.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:42 +0800] "GET /gettest.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:42 +0800] "GET /acp.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:42 +0800] "GET /file48.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:42 +0800] "GET /g.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:42 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:43 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:43 +0800] "GET /ew.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:43 +0800] "GET /file21.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:43 +0800] "GET /class19.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:44 +0800] "GET /class20.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:44 +0800] "GET /file18.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:44 +0800] "GET /vee.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:44 +0800] "GET /cabs.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:45 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:45 +0800] "GET /x1da.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:45 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "-" 4.232.94.26 - - [06/Apr/2026:14:49:46 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "-" 62.197.144.100 - - [06/Apr/2026:19:31:05 +0800] "GET /manager.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 62.197.144.100 - - [06/Apr/2026:19:31:05 +0800] "GET /bless.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:05 +0800] "GET /O-Simple.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:06 +0800] "GET /lock360.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:06 +0800] "GET /zwso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:07 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 62.197.144.100 - - [06/Apr/2026:19:31:07 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:08 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:08 +0800] "GET /.well-known/login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:08 +0800] "GET /mah.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:09 +0800] "GET /.wp/wso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 62.197.144.100 - - [06/Apr/2026:19:31:09 +0800] "GET /core.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:10 +0800] "GET /robots.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 62.197.144.100 - - [06/Apr/2026:19:31:10 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 62.197.144.100 - - [06/Apr/2026:19:31:10 +0800] "GET /mini.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:11 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 62.197.144.100 - - [06/Apr/2026:19:31:11 +0800] "GET /file5.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:12 +0800] "GET /ahax.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 62.197.144.100 - - [06/Apr/2026:19:31:12 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:12 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 62.197.144.100 - - [06/Apr/2026:19:31:13 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 62.197.144.100 - - [06/Apr/2026:19:31:13 +0800] "GET /update/f35.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 62.197.144.100 - - [06/Apr/2026:19:31:14 +0800] "GET /wp-content/hello.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 62.197.144.100 - - [06/Apr/2026:19:31:14 +0800] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 62.197.144.100 - - [06/Apr/2026:19:31:14 +0800] "GET /themes/zMousse/otuz1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:15 +0800] "GET /wp-content/edit-wolf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:15 +0800] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 62.197.144.100 - - [06/Apr/2026:19:31:16 +0800] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:16 +0800] "GET /images/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:17 +0800] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 62.197.144.100 - - [06/Apr/2026:19:31:17 +0800] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 62.197.144.100 - - [06/Apr/2026:19:31:17 +0800] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:18 +0800] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 62.197.144.100 - - [06/Apr/2026:19:31:18 +0800] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 62.197.144.100 - - [06/Apr/2026:19:31:19 +0800] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:19 +0800] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 62.197.144.100 - - [06/Apr/2026:19:31:20 +0800] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:20 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 62.197.144.100 - - [06/Apr/2026:19:31:21 +0800] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 62.197.144.100 - - [06/Apr/2026:19:31:21 +0800] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 62.197.144.100 - - [06/Apr/2026:19:31:22 +0800] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:22 +0800] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 62.197.144.100 - - [06/Apr/2026:19:31:23 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 62.197.144.100 - - [06/Apr/2026:19:31:23 +0800] "GET /uploads/94056-upload.phtml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 62.197.144.100 - - [06/Apr/2026:19:31:24 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:24 +0800] "GET /tinyfilemanager.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:25 +0800] "GET /manager.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 62.197.144.100 - - [06/Apr/2026:19:31:25 +0800] "GET /js/bas.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:25 +0800] "GET /bless.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 62.197.144.100 - - [06/Apr/2026:19:31:25 +0800] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 62.197.144.100 - - [06/Apr/2026:19:31:25 +0800] "GET /O-Simple.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:26 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 62.197.144.100 - - [06/Apr/2026:19:31:26 +0800] "GET /lock360.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 62.197.144.100 - - [06/Apr/2026:19:31:26 +0800] "GET /wp-includes/js/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:26 +0800] "GET /zwso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:27 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 62.197.144.100 - - [06/Apr/2026:19:31:27 +0800] "GET /wp-content/upgrade/item.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:27 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 62.197.144.100 - - [06/Apr/2026:19:31:27 +0800] "GET /buy.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:28 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 62.197.144.100 - - [06/Apr/2026:19:31:28 +0800] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:28 +0800] "GET /.well-known/login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:28 +0800] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:28 +0800] "GET /mah.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:29 +0800] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:29 +0800] "GET /.wp/wso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:29 +0800] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:29 +0800] "GET /core.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 62.197.144.100 - - [06/Apr/2026:19:31:29 +0800] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:30 +0800] "GET /robots.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:30 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:30 +0800] "GET /admin/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 62.197.144.100 - - [06/Apr/2026:19:31:30 +0800] "GET /mini.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 62.197.144.100 - - [06/Apr/2026:19:31:31 +0800] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:31 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:31 +0800] "GET /file5.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:31 +0800] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:32 +0800] "GET /ahax.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 62.197.144.100 - - [06/Apr/2026:19:31:32 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:32 +0800] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:32 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 62.197.144.100 - - [06/Apr/2026:19:31:33 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:33 +0800] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 62.197.144.100 - - [06/Apr/2026:19:31:33 +0800] "GET /update/f35.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:34 +0800] "GET /wp-content/hello.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:34 +0800] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:34 +0800] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:35 +0800] "GET /themes/zMousse/otuz1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 62.197.144.100 - - [06/Apr/2026:19:31:35 +0800] "GET /files/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 62.197.144.100 - - [06/Apr/2026:19:31:35 +0800] "GET /wp-content/edit-wolf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 62.197.144.100 - - [06/Apr/2026:19:31:35 +0800] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:35 +0800] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 62.197.144.100 - - [06/Apr/2026:19:31:36 +0800] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 62.197.144.100 - - [06/Apr/2026:19:31:36 +0800] "GET /inc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:36 +0800] "GET /images/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:36 +0800] "GET /wp-content/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:37 +0800] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 62.197.144.100 - - [06/Apr/2026:19:31:37 +0800] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:37 +0800] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 62.197.144.100 - - [06/Apr/2026:19:31:38 +0800] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:38 +0800] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:37 +0800] "GET /filemanager.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 62.197.144.100 - - [06/Apr/2026:19:31:39 +0800] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 62.197.144.100 - - [06/Apr/2026:19:31:39 +0800] "GET /cgi-bin/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 62.197.144.100 - - [06/Apr/2026:19:31:39 +0800] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 62.197.144.100 - - [06/Apr/2026:19:31:40 +0800] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 51.12.83.215 - - [06/Apr/2026:21:51:28 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:28 +0800] "GET /asd67.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:29 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:29 +0800] "GET /rithin.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:29 +0800] "GET /gpt-sh.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:29 +0800] "GET /gifclass.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:30 +0800] "GET /gifclass4.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:30 +0800] "GET /wp-content/packed.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:30 +0800] "GET /wolv2.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:30 +0800] "GET /wp-load.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:31 +0800] "GET /p.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:31 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:31 +0800] "GET /n.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:31 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:32 +0800] "GET /new4.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:32 +0800] "GET /r4f_1.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:33 +0800] "GET /wp-admin/maint/wp-is.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:33 +0800] "GET /class.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:34 +0800] "GET /bless11.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:35 +0800] "GET /o.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:35 +0800] "GET /a.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:35 +0800] "GET /system_log.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:36 +0800] "GET /wp-content/ssd/sallu.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:36 +0800] "GET /a2.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:36 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:36 +0800] "GET /css.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:37 +0800] "GET /file32.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:37 +0800] "GET /nope.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:37 +0800] "GET /js.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:37 +0800] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 403 199 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:38 +0800] "GET /num.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:38 +0800] "GET /mah.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:39 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:39 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:39 +0800] "GET /wfile.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:39 +0800] "GET /ok.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:40 +0800] "GET /sid3.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:40 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:40 +0800] "GET /filemanager.php HTTP/1.1" 403 199 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:41 +0800] "GET /wp-links-opml.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:41 +0800] "GET /wp-content/uploads/wp.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:42 +0800] "GET /moon.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:42 +0800] "GET /33.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:42 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:42 +0800] "GET /shell.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:43 +0800] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:43 +0800] "GET /wp-x7.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:43 +0800] "GET /log.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:43 +0800] "GET /v4.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:44 +0800] "GET /f6.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:44 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:44 +0800] "GET /an7.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:44 +0800] "GET /wp-gr.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:45 +0800] "GET /wp-includes/style-engine/index.php HTTP/1.1" 403 199 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:45 +0800] "GET /update/f35.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:46 +0800] "GET /ext.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:46 +0800] "GET /about3.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:46 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:46 +0800] "GET /zwso.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:47 +0800] "GET /alfa.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:47 +0800] "GET /fm.php HTTP/1.1" 403 199 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:47 +0800] "GET /ahax.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:48 +0800] "GET /g.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:48 +0800] "GET /0x.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:48 +0800] "GET /app/webroot/filemanager.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:48 +0800] "GET /wp-includes/IXR/about.php HTTP/1.1" 403 199 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:49 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:49 +0800] "GET /flower.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:50 +0800] "GET /public/filemanager.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:50 +0800] "GET /wp-content/voga/sallu.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:50 +0800] "GET /dlu.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:50 +0800] "GET /555.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:51 +0800] "GET /wp-mail.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:51 +0800] "GET /403.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:51 +0800] "GET /tox.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:51 +0800] "GET /lv.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:52 +0800] "GET /hook.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:52 +0800] "GET /menu.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:52 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:53 +0800] "GET /v.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:53 +0800] "GET /te.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:53 +0800] "GET /bless.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:53 +0800] "GET /12.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:54 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:54 +0800] "GET /bolt.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:54 +0800] "GET /lock360.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:54 +0800] "GET /public/manager.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:55 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:55 +0800] "GET /ol.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:55 +0800] "GET /v2.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:55 +0800] "GET /wp-admin/admin-post.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:56 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:56 +0800] "GET /new.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:56 +0800] "GET /666.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:57 +0800] "GET /akcc.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:57 +0800] "GET /mo.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:57 +0800] "GET /doc.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:57 +0800] "GET /inde.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:58 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:58 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:58 +0800] "GET /zxin.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:58 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:51:59 +0800] "GET /NewFile.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:00 +0800] "GET /aa.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:00 +0800] "GET //wolv2.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:01 +0800] "GET /geck.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:01 +0800] "GET /xtt.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:01 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:01 +0800] "GET /system.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:02 +0800] "GET /manager.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:02 +0800] "GET /gdn.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:02 +0800] "GET /ton.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:03 +0800] "GET /media.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:03 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:03 +0800] "GET /admir.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:03 +0800] "GET /fs.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:04 +0800] "GET /error.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:04 +0800] "GET /wp-admin/css/colour.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:04 +0800] "GET /cc.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:04 +0800] "GET /bkxzo.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:05 +0800] "GET /lo.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:05 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:05 +0800] "GET /layout.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:06 +0800] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:06 +0800] "GET /lmutxdvyp7u5yksqke8ozbjgCdefault.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:06 +0800] "GET /content.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:06 +0800] "GET /wp-configs.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:07 +0800] "GET /yas.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:07 +0800] "GET /file5.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:07 +0800] "GET /v3.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:07 +0800] "GET /wp-admin/maint/index.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:08 +0800] "GET /gg.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:08 +0800] "GET /wp-content/upgrade/index.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:08 +0800] "GET /himu.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:08 +0800] "GET /z.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:09 +0800] "GET /png.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:09 +0800] "GET /mds.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:09 +0800] "GET /acp.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:10 +0800] "GET /m.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:10 +0800] "GET /wp-is.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:10 +0800] "GET /file15.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:10 +0800] "GET /wsd.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:11 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:11 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:11 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:11 +0800] "GET /lol.php HTTP/1.1" 403 261 "-" "-" 51.12.83.215 - - [06/Apr/2026:21:52:12 +0800] "GET /radio.php HTTP/1.1" 403 261 "-" "-" 74.7.241.13 - - [06/Apr/2026:22:27:03 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.230.7 - - [06/Apr/2026:22:27:04 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 158.101.13.44 - - [06/Apr/2026:23:41:29 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 158.101.13.44 - - [06/Apr/2026:23:41:29 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" 158.101.13.44 - - [06/Apr/2026:23:41:30 +0800] "GET /wp-admin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0" 65.87.7.61 - - [07/Apr/2026:01:29:48 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 65.87.7.61 - - [07/Apr/2026:03:22:13 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 74.7.175.166 - - [07/Apr/2026:06:13:22 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 145.220.91.19 - - [07/Apr/2026:11:51:36 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 172.68.194.199 - - [07/Apr/2026:12:35:23 +0800] "GET /.git/refs/heads/main HTTP/1.1" 403 199 "-" "-" 172.68.194.198 - - [07/Apr/2026:12:35:23 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "-" 172.68.194.198 - - [07/Apr/2026:12:35:23 +0800] "GET /.git/refs/heads/master HTTP/1.1" 403 199 "-" "-" 162.158.110.230 - - [07/Apr/2026:12:35:24 +0800] "GET /.git/HEAD HTTP/1.1" 403 199 "-" "-" 162.158.110.230 - - [07/Apr/2026:12:35:24 +0800] "GET /.git/index HTTP/1.1" 403 199 "-" "-" 172.68.194.198 - - [07/Apr/2026:12:35:24 +0800] "GET /.env HTTP/1.1" 403 199 "-" "-" 162.158.110.231 - - [07/Apr/2026:12:35:24 +0800] "GET /.env.local HTTP/1.1" 403 199 "-" "-" 172.68.194.198 - - [07/Apr/2026:12:35:24 +0800] "GET /.env.production HTTP/1.1" 403 199 "-" "-" 162.158.110.231 - - [07/Apr/2026:12:35:25 +0800] "GET /.env.development HTTP/1.1" 403 199 "-" "-" 172.68.194.199 - - [07/Apr/2026:12:35:25 +0800] "GET /.env.dev HTTP/1.1" 403 199 "-" "-" 172.68.194.199 - - [07/Apr/2026:12:35:25 +0800] "GET /.env.test HTTP/1.1" 403 199 "-" "-" 162.158.110.230 - - [07/Apr/2026:12:35:24 +0800] "GET /.git/logs/HEAD HTTP/1.1" 403 199 "-" "-" 172.68.194.198 - - [07/Apr/2026:12:35:25 +0800] "GET /.env.staging HTTP/1.1" 403 199 "-" "-" 172.68.194.199 - - [07/Apr/2026:12:35:25 +0800] "GET /.env.backup HTTP/1.1" 403 199 "-" "-" 172.68.194.199 - - [07/Apr/2026:12:35:25 +0800] "GET /.env.bak HTTP/1.1" 403 199 "-" "-" 172.68.194.198 - - [07/Apr/2026:12:35:26 +0800] "GET /.env.old HTTP/1.1" 403 199 "-" "-" 172.68.194.198 - - [07/Apr/2026:12:35:26 +0800] "GET /.env.save HTTP/1.1" 403 199 "-" "-" 162.158.110.230 - - [07/Apr/2026:12:35:26 +0800] "GET /.env.tmp HTTP/1.1" 403 199 "-" "-" 162.158.110.230 - - [07/Apr/2026:12:35:26 +0800] "GET /.env.example HTTP/1.1" 403 199 "-" "-" 172.68.194.198 - - [07/Apr/2026:12:35:26 +0800] "GET /.env.production.local HTTP/1.1" 403 199 "-" "-" 172.68.194.199 - - [07/Apr/2026:12:35:27 +0800] "GET /.env.development.local HTTP/1.1" 403 199 "-" "-" 172.68.194.199 - - [07/Apr/2026:12:35:27 +0800] "GET /app/.env HTTP/1.1" 403 199 "-" "-" 162.158.110.231 - - [07/Apr/2026:12:35:27 +0800] "GET /config/.env HTTP/1.1" 403 199 "-" "-" 172.68.194.198 - - [07/Apr/2026:12:35:27 +0800] "GET /backend/.env HTTP/1.1" 403 199 "-" "-" 172.68.194.198 - - [07/Apr/2026:12:35:27 +0800] "GET /api/.env HTTP/1.1" 403 199 "-" "-" 162.158.110.230 - - [07/Apr/2026:12:35:28 +0800] "GET /admin/.env HTTP/1.1" 403 199 "-" "-" 162.158.110.230 - - [07/Apr/2026:12:35:28 +0800] "GET /core/.env HTTP/1.1" 403 199 "-" "-" 172.68.194.198 - - [07/Apr/2026:12:35:28 +0800] "GET /public/.env HTTP/1.1" 403 199 "-" "-" 162.158.110.230 - - [07/Apr/2026:12:35:28 +0800] "GET /private/.env HTTP/1.1" 403 199 "-" "-" 172.68.194.198 - - [07/Apr/2026:12:35:28 +0800] "GET /config/env HTTP/1.1" 403 261 "-" "-" 162.158.110.230 - - [07/Apr/2026:12:35:28 +0800] "GET /config/.env.local HTTP/1.1" 403 199 "-" "-" 172.68.194.198 - - [07/Apr/2026:12:35:28 +0800] "GET /.env1 HTTP/1.1" 403 199 "-" "-" 172.68.194.199 - - [07/Apr/2026:12:35:29 +0800] "GET /.env.php HTTP/1.1" 403 199 "-" "-" 162.158.110.230 - - [07/Apr/2026:12:35:29 +0800] "GET /.env.json HTTP/1.1" 403 199 "-" "-" 172.68.194.199 - - [07/Apr/2026:12:35:29 +0800] "GET /.env_backup HTTP/1.1" 403 199 "-" "-" 162.158.110.231 - - [07/Apr/2026:12:35:29 +0800] "GET /.env~ HTTP/1.1" 403 199 "-" "-" 172.68.194.199 - - [07/Apr/2026:12:35:29 +0800] "GET /.env.dist HTTP/1.1" 403 199 "-" "-" 172.68.194.199 - - [07/Apr/2026:12:35:30 +0800] "GET /.env2 HTTP/1.1" 403 199 "-" "-" 162.158.110.231 - - [07/Apr/2026:12:35:30 +0800] "GET /.env.orig HTTP/1.1" 403 199 "-" "-" 172.68.194.198 - - [07/Apr/2026:12:35:30 +0800] "GET /.envrc HTTP/1.1" 403 199 "-" "-" 172.68.194.199 - - [07/Apr/2026:12:35:30 +0800] "GET /.env.production.bak HTTP/1.1" 403 199 "-" "-" 162.158.110.230 - - [07/Apr/2026:12:35:30 +0800] "GET /.env.prod HTTP/1.1" 403 199 "-" "-" 162.158.110.231 - - [07/Apr/2026:12:35:30 +0800] "GET /.env.dev.local HTTP/1.1" 403 199 "-" "-" 162.158.110.231 - - [07/Apr/2026:12:35:31 +0800] "GET /.env.container HTTP/1.1" 403 199 "-" "-" 162.158.110.230 - - [07/Apr/2026:12:35:31 +0800] "GET /docker/.env HTTP/1.1" 403 199 "-" "-" 172.68.194.198 - - [07/Apr/2026:12:35:31 +0800] "GET /docker-compose.env HTTP/1.1" 403 261 "-" "-" 172.68.194.199 - - [07/Apr/2026:12:35:31 +0800] "GET /docker/.env.local HTTP/1.1" 403 199 "-" "-" 162.158.110.230 - - [07/Apr/2026:12:35:32 +0800] "GET /server/.env HTTP/1.1" 403 199 "-" "-" 172.68.194.199 - - [07/Apr/2026:12:35:32 +0800] "GET /srv/.env HTTP/1.1" 403 199 "-" "-" 172.68.194.198 - - [07/Apr/2026:12:35:32 +0800] "GET /site/.env HTTP/1.1" 403 199 "-" "-" 162.158.110.231 - - [07/Apr/2026:12:35:32 +0800] "GET /www/.env HTTP/1.1" 403 199 "-" "-" 172.68.194.198 - - [07/Apr/2026:12:35:32 +0800] "GET /var/www/html/.env HTTP/1.1" 403 199 "-" "-" 162.158.110.231 - - [07/Apr/2026:12:35:32 +0800] "GET /var/www/.env HTTP/1.1" 403 199 "-" "-" 162.158.110.230 - - [07/Apr/2026:12:35:31 +0800] "GET /.env.docker HTTP/1.1" 403 199 "-" "-" 162.158.110.231 - - [07/Apr/2026:12:35:33 +0800] "GET /home/.env HTTP/1.1" 403 199 "-" "-" 162.158.110.231 - - [07/Apr/2026:12:35:33 +0800] "GET /root/.env HTTP/1.1" 403 199 "-" "-" 162.158.110.231 - - [07/Apr/2026:12:35:33 +0800] "GET /.env_config HTTP/1.1" 403 199 "-" "-" 172.68.194.199 - - [07/Apr/2026:12:35:33 +0800] "GET /.env_secret HTTP/1.1" 403 199 "-" "-" 172.68.194.199 - - [07/Apr/2026:12:35:33 +0800] "GET /.env_settings HTTP/1.1" 403 199 "-" "-" 172.68.194.198 - - [07/Apr/2026:12:35:33 +0800] "GET /.git/HEAD HTTP/1.1" 403 199 "-" "-" 162.158.110.231 - - [07/Apr/2026:12:35:33 +0800] "GET /web/.env HTTP/1.1" 403 199 "-" "-" 162.158.110.231 - - [07/Apr/2026:12:35:33 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "-" 172.68.194.198 - - [07/Apr/2026:12:35:33 +0800] "GET /.git/index HTTP/1.1" 403 199 "-" "-" 172.68.194.199 - - [07/Apr/2026:12:35:33 +0800] "GET /.git/logs/HEAD HTTP/1.1" 403 199 "-" "-" 162.158.110.231 - - [07/Apr/2026:12:35:34 +0800] "GET /.env.local.backup HTTP/1.1" 403 199 "-" "-" 162.158.110.230 - - [07/Apr/2026:12:35:34 +0800] "GET /.git/refs/heads/master HTTP/1.1" 403 199 "-" "-" 172.68.194.199 - - [07/Apr/2026:12:35:34 +0800] "GET /.git/refs/heads/main HTTP/1.1" 403 199 "-" "-" 172.68.194.199 - - [07/Apr/2026:12:35:34 +0800] "GET /.env HTTP/1.1" 403 199 "-" "-" 172.68.194.199 - - [07/Apr/2026:12:35:34 +0800] "GET /.env.production HTTP/1.1" 403 199 "-" "-" 162.158.110.231 - - [07/Apr/2026:12:35:34 +0800] "GET /.env.test HTTP/1.1" 403 199 "-" "-" 162.158.110.231 - - [07/Apr/2026:12:35:34 +0800] "GET /.env.backup HTTP/1.1" 403 199 "-" "-" 162.158.110.231 - - [07/Apr/2026:12:35:35 +0800] "GET /.env.bak HTTP/1.1" 403 199 "-" "-" 162.158.110.231 - - [07/Apr/2026:12:35:35 +0800] "GET /.env.old HTTP/1.1" 403 199 "-" "-" 172.68.194.199 - - [07/Apr/2026:12:35:35 +0800] "GET /.env.save HTTP/1.1" 403 199 "-" "-" 172.68.194.199 - - [07/Apr/2026:12:35:36 +0800] "GET /.env.example HTTP/1.1" 403 199 "-" "-" 162.158.110.231 - - [07/Apr/2026:12:35:36 +0800] "GET /.env.production.local HTTP/1.1" 403 199 "-" "-" 172.69.186.148 - - [07/Apr/2026:12:35:53 +0800] "GET /config/.env HTTP/1.1" 403 199 "-" "-" 172.69.186.192 - - [07/Apr/2026:12:35:54 +0800] "GET /app/.env HTTP/1.1" 403 199 "-" "-" 172.69.186.189 - - [07/Apr/2026:12:35:54 +0800] "GET /backend/.env HTTP/1.1" 403 199 "-" "-" 172.69.186.15 - - [07/Apr/2026:12:35:54 +0800] "GET /api/.env HTTP/1.1" 403 199 "-" "-" 172.69.186.153 - - [07/Apr/2026:12:35:54 +0800] "GET /core/.env HTTP/1.1" 403 199 "-" "-" 172.68.194.199 - - [07/Apr/2026:12:35:54 +0800] "GET /admin/.env HTTP/1.1" 403 199 "-" "-" 172.69.186.171 - - [07/Apr/2026:12:35:55 +0800] "GET /config/env HTTP/1.1" 403 261 "-" "-" 172.69.186.177 - - [07/Apr/2026:12:35:56 +0800] "GET /.env.php HTTP/1.1" 403 199 "-" "-" 172.69.186.208 - - [07/Apr/2026:12:35:56 +0800] "GET /.env.json HTTP/1.1" 403 199 "-" "-" 172.69.186.171 - - [07/Apr/2026:12:35:57 +0800] "GET /.env_backup HTTP/1.1" 403 199 "-" "-" 172.69.186.171 - - [07/Apr/2026:12:35:57 +0800] "GET /.env~ HTTP/1.1" 403 199 "-" "-" 172.69.186.214 - - [07/Apr/2026:12:35:57 +0800] "GET /.env1 HTTP/1.1" 403 199 "-" "-" 172.69.186.148 - - [07/Apr/2026:12:35:57 +0800] "GET /.env2 HTTP/1.1" 403 199 "-" "-" 172.69.186.135 - - [07/Apr/2026:12:35:58 +0800] "GET /.env.dist HTTP/1.1" 403 199 "-" "-" 172.69.186.84 - - [07/Apr/2026:12:36:14 +0800] "GET /.env.orig HTTP/1.1" 403 199 "-" "-" 172.69.186.85 - - [07/Apr/2026:12:36:14 +0800] "GET /.env.production.bak HTTP/1.1" 403 199 "-" "-" 172.69.186.135 - - [07/Apr/2026:12:36:14 +0800] "GET /.env.dev.local HTTP/1.1" 403 199 "-" "-" 172.69.186.85 - - [07/Apr/2026:12:36:14 +0800] "GET /.env.docker HTTP/1.1" 403 199 "-" "-" 172.69.186.208 - - [07/Apr/2026:12:36:15 +0800] "GET /.env.container HTTP/1.1" 403 199 "-" "-" 172.69.186.15 - - [07/Apr/2026:12:36:15 +0800] "GET /docker/.env HTTP/1.1" 403 199 "-" "-" 172.69.186.152 - - [07/Apr/2026:12:36:15 +0800] "GET /docker-compose.env HTTP/1.1" 403 261 "-" "-" 172.69.186.157 - - [07/Apr/2026:12:36:15 +0800] "GET /docker/.env.local HTTP/1.1" 403 199 "-" "-" 172.69.186.84 - - [07/Apr/2026:12:36:15 +0800] "GET /server/.env HTTP/1.1" 403 199 "-" "-" 172.69.186.176 - - [07/Apr/2026:12:36:15 +0800] "GET /srv/.env HTTP/1.1" 403 199 "-" "-" 172.69.186.15 - - [07/Apr/2026:12:36:15 +0800] "GET /web/.env HTTP/1.1" 403 199 "-" "-" 172.69.186.208 - - [07/Apr/2026:12:36:15 +0800] "GET /site/.env HTTP/1.1" 403 199 "-" "-" 172.69.186.160 - - [07/Apr/2026:12:36:16 +0800] "GET /www/.env HTTP/1.1" 403 199 "-" "-" 172.69.186.171 - - [07/Apr/2026:12:36:16 +0800] "GET /var/www/.env HTTP/1.1" 403 199 "-" "-" 172.69.186.156 - - [07/Apr/2026:12:36:16 +0800] "GET /var/www/html/.env HTTP/1.1" 403 199 "-" "-" 172.69.186.14 - - [07/Apr/2026:12:36:16 +0800] "GET /home/.env HTTP/1.1" 403 199 "-" "-" 172.69.186.84 - - [07/Apr/2026:12:36:16 +0800] "GET /root/.env HTTP/1.1" 403 199 "-" "-" 172.69.186.135 - - [07/Apr/2026:12:36:16 +0800] "GET /.env_secret HTTP/1.1" 403 199 "-" "-" 172.69.186.148 - - [07/Apr/2026:12:36:16 +0800] "GET /.env_settings HTTP/1.1" 403 199 "-" "-" 172.69.186.170 - - [07/Apr/2026:12:36:16 +0800] "GET /.env_config HTTP/1.1" 403 199 "-" "-" 172.69.186.157 - - [07/Apr/2026:12:36:16 +0800] "GET /.env.local.backup HTTP/1.1" 403 199 "-" "-" 172.69.186.207 - - [07/Apr/2026:12:36:17 +0800] "GET /.envrc HTTP/1.1" 403 199 "-" "-" 172.69.186.123 - - [07/Apr/2026:12:36:34 +0800] "GET /.env.prod HTTP/1.1" 403 199 "-" "-" 216.81.248.197 - - [07/Apr/2026:13:33:39 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "SonyEricssonW660i/R6AD Browser/NetFront/3.3 Profile/MIDP-2.0 Configuration/CLDC-1.1" 44.250.144.119 - - [07/Apr/2026:14:31:17 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)" 44.250.144.119 - - [07/Apr/2026:14:31:17 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)" 198.235.24.203 - - [07/Apr/2026:16:46:31 +0800] "GET / HTTP/1.1" 403 261 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 4.232.88.59 - - [07/Apr/2026:17:06:21 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:21 +0800] "GET /image.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:22 +0800] "GET /wps.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:22 +0800] "GET /r2.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:22 +0800] "GET /ah25.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:23 +0800] "GET /tx79.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:23 +0800] "GET /006.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:23 +0800] "GET /Geforce.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:23 +0800] "GET /db.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:23 +0800] "GET /pp.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:24 +0800] "GET /tiny.php HTTP/1.1" 403 199 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:24 +0800] "GET /config.php? HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:25 +0800] "GET /xda.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:25 +0800] "GET /wdone1.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:25 +0800] "GET /lib.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:25 +0800] "GET /ng.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:25 +0800] "GET /awh.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:26 +0800] "GET /aee.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:26 +0800] "GET /new3.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:26 +0800] "GET /ruabjw00.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:26 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:27 +0800] "GET /webx.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:27 +0800] "GET /hhxc.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:27 +0800] "GET /wp-22.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:27 +0800] "GET /villain.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:28 +0800] "GET /wp-db.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:28 +0800] "GET /red.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:28 +0800] "GET /an7.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:29 +0800] "GET /ava.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:29 +0800] "GET /uxijj.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:29 +0800] "GET /fs7.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:29 +0800] "GET /tool2.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:29 +0800] "GET /zjllx.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:30 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:30 +0800] "GET /image.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:30 +0800] "GET /h2.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:30 +0800] "GET /wps.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:30 +0800] "GET /tiny2.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:30 +0800] "GET /r2.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:30 +0800] "GET /wsheet1.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:31 +0800] "GET /ah25.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:31 +0800] "GET /tx79.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:31 +0800] "GET /006.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:31 +0800] "GET /Geforce.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:32 +0800] "GET /db.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:32 +0800] "GET /pp.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:32 +0800] "GET /tiny.php HTTP/1.1" 403 199 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:31 +0800] "GET /dbc.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:33 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:33 +0800] "GET /config.php? HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:33 +0800] "GET /ukaa.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:33 +0800] "GET /xda.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:33 +0800] "GET /xs.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:33 +0800] "GET /wdone1.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:33 +0800] "GET /wgift1.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:33 +0800] "GET /lib.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:33 +0800] "GET /zogy1.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:34 +0800] "GET /ng.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:34 +0800] "GET /zoper1.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:34 +0800] "GET /awh.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:34 +0800] "GET /wmore1.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:34 +0800] "GET /aee.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:34 +0800] "GET /cc13.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:34 +0800] "GET /new3.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:34 +0800] "GET /ccs.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:35 +0800] "GET /ruabjw00.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:35 +0800] "GET /ccu.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:35 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:35 +0800] "GET /img.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:35 +0800] "GET /webx.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:35 +0800] "GET /bnm.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:35 +0800] "GET /hhxc.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:35 +0800] "GET /wp-turn.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:36 +0800] "GET /wp-22.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:36 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:36 +0800] "GET /villain.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:36 +0800] "GET /saorix1.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:36 +0800] "GET /wp-db.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:36 +0800] "GET /kolda.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:36 +0800] "GET /red.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:36 +0800] "GET /yussef.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:36 +0800] "GET /an7.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:37 +0800] "GET /ay.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:37 +0800] "GET /ava.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:37 +0800] "GET /12.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:37 +0800] "GET /uxijj.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:37 +0800] "GET /btx25.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:37 +0800] "GET /fs7.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:37 +0800] "GET /x123x.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:37 +0800] "GET /tool2.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:38 +0800] "GET /zjllx.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:38 +0800] "GET /trx24.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:38 +0800] "GET /lv.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:38 +0800] "GET /h2.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:38 +0800] "GET /dass.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:38 +0800] "GET /tiny2.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:38 +0800] "GET /wsheet1.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:38 +0800] "GET /less.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:39 +0800] "GET /dbc.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:39 +0800] "GET /ss.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:39 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:39 +0800] "GET /xdd.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:39 +0800] "GET /ukaa.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:39 +0800] "GET /ggb.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:39 +0800] "GET /xs.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:39 +0800] "GET /roksad1.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:40 +0800] "GET /wgift1.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:40 +0800] "GET /update1.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:40 +0800] "GET /zogy1.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:40 +0800] "GET /wp-act.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:40 +0800] "GET /zoper1.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:40 +0800] "GET /9.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:40 +0800] "GET /wmore1.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:40 +0800] "GET /new2.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:41 +0800] "GET /cc13.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:41 +0800] "GET /packsin1.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:41 +0800] "GET /wziar1.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:41 +0800] "GET /wswer1.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:41 +0800] "GET /wp-ccv.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:42 +0800] "GET /wo.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:42 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:42 +0800] "GET /floya.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:42 +0800] "GET /wolf.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:41 +0800] "GET /ccs.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:42 +0800] "GET /ccu.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:42 +0800] "GET /only.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:43 +0800] "GET /img.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:43 +0800] "GET /vdb.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:43 +0800] "GET /bnm.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:43 +0800] "GET /om.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:43 +0800] "GET /wp-turn.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:43 +0800] "GET /ox.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:43 +0800] "GET /htto.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:43 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:44 +0800] "GET /saorix1.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:44 +0800] "GET /h2h.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:44 +0800] "GET /kolda.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:44 +0800] "GET /xff.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:44 +0800] "GET /yussef.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:44 +0800] "GET /dichku.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:44 +0800] "GET /ay.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:44 +0800] "GET /lupo.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:45 +0800] "GET /12.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:45 +0800] "GET /store.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:45 +0800] "GET /btx25.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:45 +0800] "GET /xenium4.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:45 +0800] "GET /x123x.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:45 +0800] "GET /1aa.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:45 +0800] "GET /trx24.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:45 +0800] "GET /wpyur.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:46 +0800] "GET /lv.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:46 +0800] "GET /wglum.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:46 +0800] "GET /dass.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:46 +0800] "GET /ayk.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:46 +0800] "GET /less.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:46 +0800] "GET /byp8.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:46 +0800] "GET /ss.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:46 +0800] "GET /byrgo.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:46 +0800] "GET /xdd.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:47 +0800] "GET /gilo.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:47 +0800] "GET /ggb.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:47 +0800] "GET /ww.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:47 +0800] "GET /roksad1.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:47 +0800] "GET /x7r.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:47 +0800] "GET /update1.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:47 +0800] "GET /riz.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:47 +0800] "GET /wp-act.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:48 +0800] "GET /wp3.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:48 +0800] "GET /9.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:48 +0800] "GET /gecko.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:48 +0800] "GET /new2.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:48 +0800] "GET /ympoo.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:48 +0800] "GET /packsin1.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:48 +0800] "GET /she.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:48 +0800] "GET /wziar1.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:49 +0800] "GET /haojj.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:49 +0800] "GET /wswer1.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:49 +0800] "GET /wp-ccv.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:49 +0800] "GET /wo.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:49 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:50 +0800] "GET /floya.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:50 +0800] "GET /wolf.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:50 +0800] "GET /only.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:50 +0800] "GET /vdb.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:51 +0800] "GET /om.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:51 +0800] "GET /ox.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:51 +0800] "GET /htto.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:51 +0800] "GET /h2h.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:52 +0800] "GET /xff.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:52 +0800] "GET /dichku.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:53 +0800] "GET /lupo.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:54 +0800] "GET /store.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:54 +0800] "GET /xenium4.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:54 +0800] "GET /1aa.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:54 +0800] "GET /wpyur.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:55 +0800] "GET /wglum.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:55 +0800] "GET /ayk.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:55 +0800] "GET /byp8.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:55 +0800] "GET /byrgo.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:56 +0800] "GET /gilo.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:56 +0800] "GET /ww.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:56 +0800] "GET /x7r.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:56 +0800] "GET /riz.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:57 +0800] "GET /wp3.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:57 +0800] "GET /gecko.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:57 +0800] "GET /ympoo.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:57 +0800] "GET /she.php HTTP/1.1" 403 261 "-" "-" 4.232.88.59 - - [07/Apr/2026:17:06:57 +0800] "GET /haojj.php HTTP/1.1" 403 261 "-" "-" 91.217.249.208 - - [07/Apr/2026:17:09:23 +0800] "GET /manager.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.208 - - [07/Apr/2026:17:09:23 +0800] "GET /bless.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.217.249.208 - - [07/Apr/2026:17:09:23 +0800] "GET /O-Simple.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.208 - - [07/Apr/2026:17:09:24 +0800] "GET /lock360.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.217.249.208 - - [07/Apr/2026:17:09:24 +0800] "GET /zwso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.208 - - [07/Apr/2026:17:09:24 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 91.217.249.208 - - [07/Apr/2026:17:09:25 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.208 - - [07/Apr/2026:17:09:25 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.217.249.208 - - [07/Apr/2026:17:09:25 +0800] "GET /mah.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.217.249.208 - - [07/Apr/2026:17:09:26 +0800] "GET /.wp/wso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.208 - - [07/Apr/2026:17:09:26 +0800] "GET /core.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.208 - - [07/Apr/2026:17:09:26 +0800] "GET /robots.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.208 - - [07/Apr/2026:17:09:27 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.208 - - [07/Apr/2026:17:09:27 +0800] "GET /mini.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.217.249.208 - - [07/Apr/2026:17:09:27 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.208 - - [07/Apr/2026:17:09:28 +0800] "GET /file5.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.208 - - [07/Apr/2026:17:09:28 +0800] "GET /ahax.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.208 - - [07/Apr/2026:17:09:28 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.217.249.208 - - [07/Apr/2026:17:09:28 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.208 - - [07/Apr/2026:17:09:29 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.217.249.208 - - [07/Apr/2026:17:09:29 +0800] "GET /update/f35.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.208 - - [07/Apr/2026:17:09:29 +0800] "GET /wp-content/hello.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.208 - - [07/Apr/2026:17:09:30 +0800] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.208 - - [07/Apr/2026:17:09:30 +0800] "GET /themes/zMousse/otuz1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.217.249.208 - - [07/Apr/2026:17:09:30 +0800] "GET /wp-content/edit-wolf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.208 - - [07/Apr/2026:17:09:31 +0800] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.208 - - [07/Apr/2026:17:09:31 +0800] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.208 - - [07/Apr/2026:17:09:31 +0800] "GET /images/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.208 - - [07/Apr/2026:17:09:32 +0800] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.208 - - [07/Apr/2026:17:09:32 +0800] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.208 - - [07/Apr/2026:17:09:32 +0800] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.208 - - [07/Apr/2026:17:09:32 +0800] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.217.249.208 - - [07/Apr/2026:17:09:33 +0800] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.208 - - [07/Apr/2026:17:09:33 +0800] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.185 - - [07/Apr/2026:17:09:34 +0800] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.217.249.185 - - [07/Apr/2026:17:09:35 +0800] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.217.249.185 - - [07/Apr/2026:17:09:35 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.185 - - [07/Apr/2026:17:09:35 +0800] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.210 - - [07/Apr/2026:17:09:36 +0800] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 91.217.249.210 - - [07/Apr/2026:17:09:37 +0800] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.217.249.210 - - [07/Apr/2026:17:09:37 +0800] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 91.217.249.210 - - [07/Apr/2026:17:09:37 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.217.249.210 - - [07/Apr/2026:17:09:37 +0800] "GET /uploads/94056-upload.phtml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.210 - - [07/Apr/2026:17:09:38 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.217.249.210 - - [07/Apr/2026:17:09:38 +0800] "GET /tinyfilemanager.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.217.249.189 - - [07/Apr/2026:17:09:39 +0800] "GET /js/bas.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.189 - - [07/Apr/2026:17:09:40 +0800] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.189 - - [07/Apr/2026:17:09:40 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 91.217.249.189 - - [07/Apr/2026:17:09:40 +0800] "GET /wp-includes/js/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.198 - - [07/Apr/2026:17:09:41 +0800] "GET /wp-content/upgrade/item.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.198 - - [07/Apr/2026:17:09:42 +0800] "GET /buy.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.198 - - [07/Apr/2026:17:09:42 +0800] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.198 - - [07/Apr/2026:17:09:42 +0800] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.198 - - [07/Apr/2026:17:09:43 +0800] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.198 - - [07/Apr/2026:17:09:43 +0800] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.217.249.198 - - [07/Apr/2026:17:09:43 +0800] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.217.249.217 - - [07/Apr/2026:17:09:45 +0800] "GET /admin/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.217 - - [07/Apr/2026:17:09:45 +0800] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.217.249.221 - - [07/Apr/2026:17:09:46 +0800] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.219 - - [07/Apr/2026:17:09:47 +0800] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.191 - - [07/Apr/2026:17:09:49 +0800] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.203 - - [07/Apr/2026:17:09:50 +0800] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.217.249.192 - - [07/Apr/2026:17:09:51 +0800] "GET /files/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.192 - - [07/Apr/2026:17:09:52 +0800] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.202.227 - - [07/Apr/2026:17:09:53 +0800] "GET /inc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.202.227 - - [07/Apr/2026:17:09:53 +0800] "GET /wp-content/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.202.227 - - [07/Apr/2026:17:09:53 +0800] "GET /filemanager.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.186 - - [07/Apr/2026:17:09:55 +0800] "GET /cgi-bin/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.186 - - [07/Apr/2026:17:09:55 +0800] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.186 - - [07/Apr/2026:17:09:56 +0800] "GET /wp-includes/IXR/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.215 - - [07/Apr/2026:17:09:57 +0800] "GET /wp-admin/js/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.217.249.215 - - [07/Apr/2026:17:09:57 +0800] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.217.249.184 - - [07/Apr/2026:17:09:58 +0800] "GET /function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.184 - - [07/Apr/2026:17:09:59 +0800] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.200 - - [07/Apr/2026:17:10:00 +0800] "GET /wp-signup.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.200 - - [07/Apr/2026:17:10:00 +0800] "GET /wp-admin/network/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.200 - - [07/Apr/2026:17:10:00 +0800] "GET /admin/upload/css.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 91.217.249.200 - - [07/Apr/2026:17:10:01 +0800] "GET /wp-blog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.200 - - [07/Apr/2026:17:10:01 +0800] "GET /wp-admin/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.200 - - [07/Apr/2026:17:10:02 +0800] "GET /wp-content/plugins/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.200 - - [07/Apr/2026:17:10:02 +0800] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.204 - - [07/Apr/2026:17:10:05 +0800] "GET /wp-l0gin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.204 - - [07/Apr/2026:17:10:05 +0800] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.202.226 - - [07/Apr/2026:17:10:07 +0800] "GET /new.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.202.226 - - [07/Apr/2026:17:10:07 +0800] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.202.226 - - [07/Apr/2026:17:10:07 +0800] "GET /wp-includes/defaults.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.189 - - [07/Apr/2026:17:10:08 +0800] "GET /images/DJP9.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 91.217.249.189 - - [07/Apr/2026:17:10:09 +0800] "GET /wp-includes/customize/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.217.249.222 - - [07/Apr/2026:17:10:10 +0800] "GET /wp-admin/shell20211028.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.222 - - [07/Apr/2026:17:10:11 +0800] "GET /natural.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.222 - - [07/Apr/2026:17:10:11 +0800] "GET /item.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.217.249.222 - - [07/Apr/2026:17:10:11 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.217.249.222 - - [07/Apr/2026:17:10:12 +0800] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.202.227 - - [07/Apr/2026:17:10:13 +0800] "GET /wp-admin/images/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.202.227 - - [07/Apr/2026:17:10:13 +0800] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.217.249.205 - - [07/Apr/2026:17:10:14 +0800] "GET /about/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.217.249.205 - - [07/Apr/2026:17:10:15 +0800] "GET /wp-includes/Requests/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.192 - - [07/Apr/2026:17:10:16 +0800] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.211 - - [07/Apr/2026:17:10:17 +0800] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.217.249.193 - - [07/Apr/2026:17:10:18 +0800] "GET /wp-content/languages/404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.217.249.193 - - [07/Apr/2026:17:10:19 +0800] "GET /update/403.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.217.249.193 - - [07/Apr/2026:17:10:19 +0800] "GET /default.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.193 - - [07/Apr/2026:17:10:19 +0800] "GET /wp-includes/assets/info.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.191 - - [07/Apr/2026:17:10:20 +0800] "GET /wp-includes/class.api.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.217.249.226 - - [07/Apr/2026:17:10:21 +0800] "GET /wp-includes/fonts/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.211 - - [07/Apr/2026:17:10:22 +0800] "GET /wp-admin/chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.211 - - [07/Apr/2026:17:10:22 +0800] "GET /autoload_classmap/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.211 - - [07/Apr/2026:17:10:23 +0800] "GET /dropdown.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.217.249.211 - - [07/Apr/2026:17:10:23 +0800] "GET /images/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.217.249.211 - - [07/Apr/2026:17:10:23 +0800] "GET /db.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.211 - - [07/Apr/2026:17:10:24 +0800] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.211 - - [07/Apr/2026:17:10:24 +0800] "GET /mah/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.211 - - [07/Apr/2026:17:10:24 +0800] "GET /wp-content/plugins/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.217.249.211 - - [07/Apr/2026:17:10:25 +0800] "GET /wp-includes/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.222 - - [07/Apr/2026:17:10:26 +0800] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.222 - - [07/Apr/2026:17:10:26 +0800] "GET /wp-admin/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.217.249.222 - - [07/Apr/2026:17:10:26 +0800] "GET /templates/beez3/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.217.249.222 - - [07/Apr/2026:17:10:27 +0800] "GET /wp-admin/js/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.222 - - [07/Apr/2026:17:10:28 +0800] "GET /install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.222 - - [07/Apr/2026:17:10:28 +0800] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 91.217.249.222 - - [07/Apr/2026:17:10:29 +0800] "GET /images/class-config.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.222 - - [07/Apr/2026:17:10:29 +0800] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.217.249.222 - - [07/Apr/2026:17:10:29 +0800] "GET /templates/beez/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.222 - - [07/Apr/2026:17:10:30 +0800] "GET /bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.217.249.222 - - [07/Apr/2026:17:10:30 +0800] "GET /class.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.222 - - [07/Apr/2026:17:10:30 +0800] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.222 - - [07/Apr/2026:17:10:31 +0800] "GET /wp-content/product.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.217.249.222 - - [07/Apr/2026:17:10:31 +0800] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.217.249.222 - - [07/Apr/2026:17:10:31 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.222 - - [07/Apr/2026:17:10:32 +0800] "GET /wp-includes/rest-api/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.202.208 - - [07/Apr/2026:17:10:33 +0800] "GET /css/css.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.202.208 - - [07/Apr/2026:17:10:33 +0800] "GET /init.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.202.208 - - [07/Apr/2026:17:10:33 +0800] "GET /wp-admin/user/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:10:34 +0800] "GET /autoload_classmap/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:10:34 +0800] "GET /wp-includes/item.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.186 - - [07/Apr/2026:17:10:35 +0800] "GET /assets/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.217.249.186 - - [07/Apr/2026:17:10:36 +0800] "GET /.well-known/pki-validation/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.217.249.186 - - [07/Apr/2026:17:10:36 +0800] "GET /wp-content/uploads/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.186 - - [07/Apr/2026:17:10:37 +0800] "GET /css/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.186 - - [07/Apr/2026:17:10:37 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.186 - - [07/Apr/2026:17:10:37 +0800] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.217.249.186 - - [07/Apr/2026:17:10:38 +0800] "GET /wp_wlx.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.186 - - [07/Apr/2026:17:10:38 +0800] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.217.249.186 - - [07/Apr/2026:17:10:38 +0800] "GET /wp-includes/assets/husky301.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.212 - - [07/Apr/2026:17:10:40 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.217.249.212 - - [07/Apr/2026:17:10:40 +0800] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.212 - - [07/Apr/2026:17:10:41 +0800] "GET /wp-content/themes/chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.217.249.212 - - [07/Apr/2026:17:10:41 +0800] "GET /wp-header.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.212 - - [07/Apr/2026:17:10:41 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.212 - - [07/Apr/2026:17:10:42 +0800] "GET /Marvins.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.212 - - [07/Apr/2026:17:10:42 +0800] "GET /wp-content/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.212 - - [07/Apr/2026:17:10:43 +0800] "GET /wp-class.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.217.249.212 - - [07/Apr/2026:17:10:43 +0800] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.214 - - [07/Apr/2026:17:10:44 +0800] "GET /xx.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.214 - - [07/Apr/2026:17:10:45 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.217.249.214 - - [07/Apr/2026:17:10:45 +0800] "GET /wp-includes/classwithtostring.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.197 - - [07/Apr/2026:17:10:47 +0800] "GET /wp-content/blue.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.217.249.197 - - [07/Apr/2026:17:10:47 +0800] "GET /content.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.197 - - [07/Apr/2026:17:10:47 +0800] "GET /wp-content/uploads/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.197 - - [07/Apr/2026:17:10:48 +0800] "GET /wp-admin/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.197 - - [07/Apr/2026:17:10:48 +0800] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.217.249.215 - - [07/Apr/2026:17:10:49 +0800] "GET /wp-content/languages/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.215 - - [07/Apr/2026:17:10:49 +0800] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.217.249.215 - - [07/Apr/2026:17:10:49 +0800] "GET /wp-content/plugins/up/main.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.217.249.215 - - [07/Apr/2026:17:10:50 +0800] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.215 - - [07/Apr/2026:17:10:50 +0800] "GET /wp-admin/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.217.249.215 - - [07/Apr/2026:17:10:50 +0800] "GET /wp-admin/includes/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.217.249.215 - - [07/Apr/2026:17:10:51 +0800] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.217.249.215 - - [07/Apr/2026:17:10:51 +0800] "GET /images/images/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.217.249.215 - - [07/Apr/2026:17:10:51 +0800] "GET /images/class.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.217.249.215 - - [07/Apr/2026:17:10:52 +0800] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.215 - - [07/Apr/2026:17:10:52 +0800] "GET /web.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.217.249.215 - - [07/Apr/2026:17:10:52 +0800] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.217.249.215 - - [07/Apr/2026:17:10:53 +0800] "GET /images/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.215 - - [07/Apr/2026:17:10:53 +0800] "GET /wp-content/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.217.249.215 - - [07/Apr/2026:17:10:53 +0800] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.215 - - [07/Apr/2026:17:10:54 +0800] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.215 - - [07/Apr/2026:17:10:54 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.215 - - [07/Apr/2026:17:10:55 +0800] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.202 - - [07/Apr/2026:17:10:56 +0800] "GET /radio.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.202 - - [07/Apr/2026:17:10:56 +0800] "GET /wp-admin/mah.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.217.249.202 - - [07/Apr/2026:17:10:57 +0800] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.202 - - [07/Apr/2026:17:10:57 +0800] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.202 - - [07/Apr/2026:17:10:57 +0800] "GET /wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.202 - - [07/Apr/2026:17:10:57 +0800] "GET /wp-setup.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.217.249.202 - - [07/Apr/2026:17:10:58 +0800] "GET /ms-themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.217.249.202 - - [07/Apr/2026:17:10:58 +0800] "GET /wp-includes/assets/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.202.209 - - [07/Apr/2026:17:11:00 +0800] "GET /style.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.202.209 - - [07/Apr/2026:17:11:00 +0800] "GET /wp-includes/infi.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.196 - - [07/Apr/2026:17:11:02 +0800] "GET /wp-admin/maint/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.217.249.196 - - [07/Apr/2026:17:11:02 +0800] "GET /x.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.217.249.196 - - [07/Apr/2026:17:11:03 +0800] "GET /wp-includes/IXR/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.217.249.189 - - [07/Apr/2026:17:11:05 +0800] "GET /css/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.217.249.189 - - [07/Apr/2026:17:11:05 +0800] "GET /images/index22.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.189 - - [07/Apr/2026:17:11:05 +0800] "GET /wp-user.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.189 - - [07/Apr/2026:17:11:06 +0800] "GET /wp-includes/pomo/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.199 - - [07/Apr/2026:17:11:08 +0800] "GET /wp-includes/pomo/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.217.249.218 - - [07/Apr/2026:17:11:09 +0800] "GET /config.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.218 - - [07/Apr/2026:17:11:10 +0800] "GET /special.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.218 - - [07/Apr/2026:17:11:10 +0800] "GET /assets/script.js.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.217.249.218 - - [07/Apr/2026:17:11:10 +0800] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.218 - - [07/Apr/2026:17:11:11 +0800] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.217.249.218 - - [07/Apr/2026:17:11:11 +0800] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.206 - - [07/Apr/2026:17:11:13 +0800] "GET /wp-content/uploads/wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.206 - - [07/Apr/2026:17:11:13 +0800] "GET /wp-includes/certificates/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.217.249.193 - - [07/Apr/2026:17:11:15 +0800] "GET /cgi-bin/class.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.193 - - [07/Apr/2026:17:11:15 +0800] "GET /wp-content/cache/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.193 - - [07/Apr/2026:17:11:15 +0800] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.193 - - [07/Apr/2026:17:11:16 +0800] "GET /wp-includes/edit.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.217.249.212 - - [07/Apr/2026:17:11:17 +0800] "GET /webdb.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.217.249.212 - - [07/Apr/2026:17:11:18 +0800] "GET /assets/images/doc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.212 - - [07/Apr/2026:17:11:18 +0800] "GET /file2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.217.249.212 - - [07/Apr/2026:17:11:18 +0800] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.217.249.186 - - [07/Apr/2026:17:11:20 +0800] "GET /alfa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.186 - - [07/Apr/2026:17:11:20 +0800] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.186 - - [07/Apr/2026:17:11:21 +0800] "GET /wp-includes/click.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.217.249.199 - - [07/Apr/2026:17:11:23 +0800] "GET /.well-known/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.217.249.199 - - [07/Apr/2026:17:11:23 +0800] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.199 - - [07/Apr/2026:17:11:23 +0800] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.217.249.199 - - [07/Apr/2026:17:11:24 +0800] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.217.249.191 - - [07/Apr/2026:17:11:26 +0800] "GET /wp-admin/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.191 - - [07/Apr/2026:17:11:26 +0800] "GET /edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.191 - - [07/Apr/2026:17:11:26 +0800] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.191 - - [07/Apr/2026:17:11:27 +0800] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.191 - - [07/Apr/2026:17:11:27 +0800] "GET /wp-links-opml.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.217.249.191 - - [07/Apr/2026:17:11:27 +0800] "GET /wp-admin/user/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.217.249.191 - - [07/Apr/2026:17:11:27 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.217.249.191 - - [07/Apr/2026:17:11:28 +0800] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.222 - - [07/Apr/2026:17:11:31 +0800] "GET /wp-includes/xl2023.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.202 - - [07/Apr/2026:17:11:32 +0800] "GET /wp-includes/certificates/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.189 - - [07/Apr/2026:17:11:33 +0800] "GET /wp-includes/images/media/dog.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.217.249.202 - - [07/Apr/2026:17:11:35 +0800] "GET /xp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.202 - - [07/Apr/2026:17:11:35 +0800] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.202 - - [07/Apr/2026:17:11:37 +0800] "GET /wp-includes/assets/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.198 - - [07/Apr/2026:17:11:38 +0800] "GET /wp-links.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.198 - - [07/Apr/2026:17:11:38 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.217.249.198 - - [07/Apr/2026:17:11:39 +0800] "GET /wp-includes/css/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.189 - - [07/Apr/2026:17:11:40 +0800] "GET /wp-includes/ID3/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.217.249.199 - - [07/Apr/2026:17:11:41 +0800] "GET /wp-includes/pomo/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.217.249.201 - - [07/Apr/2026:17:11:42 +0800] "GET /wp-includes/IXR/security.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 91.217.249.194 - - [07/Apr/2026:17:11:43 +0800] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 91.217.249.194 - - [07/Apr/2026:17:11:44 +0800] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.217.249.225 - - [07/Apr/2026:17:11:45 +0800] "GET /wp-content/plugins/hello.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.225 - - [07/Apr/2026:17:11:45 +0800] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.225 - - [07/Apr/2026:17:11:45 +0800] "GET /wp-includes/fonts/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.220 - - [07/Apr/2026:17:11:47 +0800] "GET /moon.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.217.249.220 - - [07/Apr/2026:17:11:47 +0800] "GET /wp-admin/user/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.220 - - [07/Apr/2026:17:11:47 +0800] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.220 - - [07/Apr/2026:17:11:48 +0800] "GET /webadmin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.220 - - [07/Apr/2026:17:11:48 +0800] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.217.249.195 - - [07/Apr/2026:17:11:49 +0800] "GET /wp-admin/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.217.249.195 - - [07/Apr/2026:17:11:50 +0800] "GET /xl2023.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.195 - - [07/Apr/2026:17:11:50 +0800] "GET /go.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.217.249.195 - - [07/Apr/2026:17:11:50 +0800] "GET /wp-admin/xleet.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.217.249.195 - - [07/Apr/2026:17:11:51 +0800] "GET /templates/beez3/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.195 - - [07/Apr/2026:17:11:51 +0800] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.195 - - [07/Apr/2026:17:11:51 +0800] "GET /.well-known/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.217.249.195 - - [07/Apr/2026:17:11:52 +0800] "GET /wp-includes/assets/file.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.217.249.208 - - [07/Apr/2026:17:11:53 +0800] "GET /cgi-bin/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.217.249.208 - - [07/Apr/2026:17:11:53 +0800] "GET /wp-content/uploads/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.208 - - [07/Apr/2026:17:11:53 +0800] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.217.249.208 - - [07/Apr/2026:17:11:54 +0800] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.202 - - [07/Apr/2026:17:11:55 +0800] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.205 - - [07/Apr/2026:17:11:56 +0800] "GET /wp-admin/css/colors/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.205 - - [07/Apr/2026:17:11:56 +0800] "GET /warm.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.205 - - [07/Apr/2026:17:11:57 +0800] "GET /wp-admin/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.217.249.205 - - [07/Apr/2026:17:11:57 +0800] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.205 - - [07/Apr/2026:17:11:57 +0800] "GET /wp-includes/images/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.217.249.212 - - [07/Apr/2026:17:11:58 +0800] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.217.249.212 - - [07/Apr/2026:17:11:59 +0800] "GET /blog/wp-content/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.212 - - [07/Apr/2026:17:11:59 +0800] "GET /hehehehe.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.217.249.212 - - [07/Apr/2026:17:11:59 +0800] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.212 - - [07/Apr/2026:17:12:00 +0800] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.212 - - [07/Apr/2026:17:12:00 +0800] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.212 - - [07/Apr/2026:17:12:01 +0800] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.212 - - [07/Apr/2026:17:12:01 +0800] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.212 - - [07/Apr/2026:17:12:01 +0800] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.212 - - [07/Apr/2026:17:12:02 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.217.249.212 - - [07/Apr/2026:17:12:02 +0800] "GET /wp-includes/Requests/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.202.209 - - [07/Apr/2026:17:12:03 +0800] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 91.217.249.216 - - [07/Apr/2026:17:12:05 +0800] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.202.206 - - [07/Apr/2026:17:12:06 +0800] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.224 - - [07/Apr/2026:17:12:07 +0800] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.202.226 - - [07/Apr/2026:17:12:09 +0800] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.217.249.195 - - [07/Apr/2026:17:12:10 +0800] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.195 - - [07/Apr/2026:17:12:10 +0800] "GET /wp-includes/images/media/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.207 - - [07/Apr/2026:17:12:11 +0800] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.198 - - [07/Apr/2026:17:12:13 +0800] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.217.249.182 - - [07/Apr/2026:17:12:14 +0800] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.192 - - [07/Apr/2026:17:12:15 +0800] "GET /wp-admin/maint/themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.217.249.192 - - [07/Apr/2026:17:12:15 +0800] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.192 - - [07/Apr/2026:17:12:16 +0800] "GET /wp-includes/fonts/themes.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.202.209 - - [07/Apr/2026:17:12:17 +0800] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.202.209 - - [07/Apr/2026:17:12:17 +0800] "GET /wp-includes/certificates/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.196 - - [07/Apr/2026:17:12:19 +0800] "GET /byp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.196 - - [07/Apr/2026:17:12:19 +0800] "GET /blog/wp-includes/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.217.249.196 - - [07/Apr/2026:17:12:19 +0800] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.217.249.196 - - [07/Apr/2026:17:12:21 +0800] "GET /blog/wp-admin/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.217.249.196 - - [07/Apr/2026:17:12:21 +0800] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.196 - - [07/Apr/2026:17:12:21 +0800] "GET /wp-includes/css/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.193 - - [07/Apr/2026:17:12:23 +0800] "GET /cgi-bin/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.193 - - [07/Apr/2026:17:12:23 +0800] "GET /wp-content/wso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.193 - - [07/Apr/2026:17:12:23 +0800] "GET /class.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.217.249.193 - - [07/Apr/2026:17:12:24 +0800] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.217.249.212 - - [07/Apr/2026:17:12:25 +0800] "GET /wp-content/radio.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.217.249.212 - - [07/Apr/2026:17:12:25 +0800] "GET /system_log.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.217.249.212 - - [07/Apr/2026:17:12:26 +0800] "GET /.alf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.212 - - [07/Apr/2026:17:12:26 +0800] "GET /wso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.212 - - [07/Apr/2026:17:12:26 +0800] "GET /wp-includes/blocks/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.217 - - [07/Apr/2026:17:12:27 +0800] "GET /flower.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.217 - - [07/Apr/2026:17:12:28 +0800] "GET /wp-includes/wp-class.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.217.249.224 - - [07/Apr/2026:17:12:29 +0800] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.217.249.224 - - [07/Apr/2026:17:12:31 +0800] "GET /wp-content/1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.217.249.224 - - [07/Apr/2026:17:12:31 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.224 - - [07/Apr/2026:17:12:31 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.224 - - [07/Apr/2026:17:12:32 +0800] "GET /setup.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.224 - - [07/Apr/2026:17:12:32 +0800] "GET /.bod/.ll/ss.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.224 - - [07/Apr/2026:17:12:32 +0800] "GET /.well-known/radio.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.217.249.224 - - [07/Apr/2026:17:12:33 +0800] "GET /wp-content/plugin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.217.249.224 - - [07/Apr/2026:17:12:33 +0800] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.224 - - [07/Apr/2026:17:12:33 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.224 - - [07/Apr/2026:17:12:34 +0800] "GET /cc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.224 - - [07/Apr/2026:17:12:34 +0800] "GET /.well-known/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.224 - - [07/Apr/2026:17:12:34 +0800] "GET /ab.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.224 - - [07/Apr/2026:17:12:35 +0800] "GET /wp-content/themes/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.224 - - [07/Apr/2026:17:12:35 +0800] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.224 - - [07/Apr/2026:17:12:36 +0800] "GET /doc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.217.249.224 - - [07/Apr/2026:17:12:36 +0800] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.217.249.188 - - [07/Apr/2026:17:12:37 +0800] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.224 - - [07/Apr/2026:17:12:38 +0800] "GET /mar.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.224 - - [07/Apr/2026:17:12:38 +0800] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.217.249.194 - - [07/Apr/2026:17:12:40 +0800] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.194 - - [07/Apr/2026:17:12:40 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.194 - - [07/Apr/2026:17:12:40 +0800] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.217.249.227 - - [07/Apr/2026:17:12:41 +0800] "GET /wp-includes/style-engine/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.217.249.200 - - [07/Apr/2026:17:12:43 +0800] "GET /js/fm.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.200 - - [07/Apr/2026:17:12:43 +0800] "GET /wp-admin/images/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.200 - - [07/Apr/2026:17:12:43 +0800] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.200 - - [07/Apr/2026:17:12:43 +0800] "GET /wp-content/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.200 - - [07/Apr/2026:17:12:44 +0800] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.188 - - [07/Apr/2026:17:12:45 +0800] "GET /fm.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.217.249.210 - - [07/Apr/2026:17:12:46 +0800] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.210 - - [07/Apr/2026:17:12:47 +0800] "GET /adminfuns.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 91.217.249.210 - - [07/Apr/2026:17:12:47 +0800] "GET /wp-admin/images/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.210 - - [07/Apr/2026:17:12:47 +0800] "GET /ini.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.210 - - [07/Apr/2026:17:12:47 +0800] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.210 - - [07/Apr/2026:17:12:48 +0800] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.217.249.226 - - [07/Apr/2026:17:12:49 +0800] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.217.249.226 - - [07/Apr/2026:17:12:49 +0800] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.226 - - [07/Apr/2026:17:12:50 +0800] "GET /wp-admin/js/instaall.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.217.249.226 - - [07/Apr/2026:17:12:50 +0800] "GET /wp-includes/function.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.226 - - [07/Apr/2026:17:12:51 +0800] "GET /wp-includes/plugins.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.217.249.197 - - [07/Apr/2026:17:12:54 +0800] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 91.217.249.197 - - [07/Apr/2026:17:12:54 +0800] "GET /wp-content.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.197 - - [07/Apr/2026:17:12:54 +0800] "GET /wp-includes/css/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.202 - - [07/Apr/2026:17:12:56 +0800] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.194 - - [07/Apr/2026:17:12:57 +0800] "GET /wp-admin/network/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.217.249.194 - - [07/Apr/2026:17:12:57 +0800] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.194 - - [07/Apr/2026:17:12:58 +0800] "GET /customize.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.194 - - [07/Apr/2026:17:12:58 +0800] "GET /license.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.194 - - [07/Apr/2026:17:12:58 +0800] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.194 - - [07/Apr/2026:17:12:59 +0800] "GET /lock.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.194 - - [07/Apr/2026:17:12:59 +0800] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.217.249.194 - - [07/Apr/2026:17:12:59 +0800] "GET /wp-includes/atomlib.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.202.208 - - [07/Apr/2026:17:13:00 +0800] "GET /wp-includes/rest-api/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.217.249.199 - - [07/Apr/2026:17:13:02 +0800] "GET /.well-known/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.217.249.199 - - [07/Apr/2026:17:13:03 +0800] "GET /.well-known/wincust.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.199 - - [07/Apr/2026:17:13:03 +0800] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.199 - - [07/Apr/2026:17:13:04 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.217.249.199 - - [07/Apr/2026:17:13:04 +0800] "GET /wp-includes/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.182 - - [07/Apr/2026:17:13:06 +0800] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.187 - - [07/Apr/2026:17:13:08 +0800] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.188 - - [07/Apr/2026:17:13:09 +0800] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.188 - - [07/Apr/2026:17:13:10 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.188 - - [07/Apr/2026:17:13:10 +0800] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.217.249.188 - - [07/Apr/2026:17:13:10 +0800] "GET /fonts/database.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.217.249.188 - - [07/Apr/2026:17:13:11 +0800] "GET /ff2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.188 - - [07/Apr/2026:17:13:11 +0800] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.185 - - [07/Apr/2026:17:13:12 +0800] "GET /wp-admin/plugin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.185 - - [07/Apr/2026:17:13:12 +0800] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:13:14 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:13:14 +0800] "GET /wp-atom.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.202.208 - - [07/Apr/2026:17:13:14 +0800] "GET /wp-admin/css/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:13:15 +0800] "GET /up.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.202.208 - - [07/Apr/2026:17:13:15 +0800] "GET /wp-content/uploads/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.202.208 - - [07/Apr/2026:17:13:15 +0800] "GET /assets/images/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:13:16 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.202.208 - - [07/Apr/2026:17:13:16 +0800] "GET /js/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.202.208 - - [07/Apr/2026:17:13:16 +0800] "GET /simple/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.202.208 - - [07/Apr/2026:17:13:17 +0800] "GET /worm.PhP HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:13:17 +0800] "GET /ext.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:13:17 +0800] "GET /delpaths.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.202.208 - - [07/Apr/2026:17:13:18 +0800] "GET /.well-known/pki-validation/1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:13:18 +0800] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:13:18 +0800] "GET /.well-known/pki-validation/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:13:19 +0800] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:13:19 +0800] "GET /gifclass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:13:19 +0800] "GET /plugin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:13:20 +0800] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.202.208 - - [07/Apr/2026:17:13:20 +0800] "GET /update-core.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.202.208 - - [07/Apr/2026:17:13:21 +0800] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.202.208 - - [07/Apr/2026:17:13:21 +0800] "GET /wp-mail.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:13:21 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:13:22 +0800] "GET /wp-admin/defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:13:22 +0800] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:13:22 +0800] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:13:23 +0800] "GET /wp-admin/maint/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:13:23 +0800] "GET /wp-admin/js/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.202.208 - - [07/Apr/2026:17:13:23 +0800] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.202.208 - - [07/Apr/2026:17:13:24 +0800] "GET /wp-admin/maint/maint.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.202.208 - - [07/Apr/2026:17:13:24 +0800] "GET /assets/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.202.208 - - [07/Apr/2026:17:13:24 +0800] "GET /aa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:13:25 +0800] "GET /index2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.202.208 - - [07/Apr/2026:17:13:25 +0800] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:13:25 +0800] "GET /wp-admin/network/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:13:26 +0800] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.202.208 - - [07/Apr/2026:17:13:26 +0800] "GET /wp-content/languages/plugins.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.202.208 - - [07/Apr/2026:17:13:26 +0800] "GET /shell.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.202.208 - - [07/Apr/2026:17:13:26 +0800] "GET /.well-known/content.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.202.208 - - [07/Apr/2026:17:13:27 +0800] "GET /wp-includes/Text/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.197 - - [07/Apr/2026:17:13:28 +0800] "GET /wp-admin/network/atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.217.249.197 - - [07/Apr/2026:17:13:28 +0800] "GET /.well-known/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.197 - - [07/Apr/2026:17:13:29 +0800] "GET /hehe.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.197 - - [07/Apr/2026:17:13:29 +0800] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.217.249.211 - - [07/Apr/2026:17:13:31 +0800] "GET /css/slider.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.211 - - [07/Apr/2026:17:13:32 +0800] "GET /dir.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.211 - - [07/Apr/2026:17:13:33 +0800] "GET /wp-includes/css/atomlib.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.225 - - [07/Apr/2026:17:13:34 +0800] "GET /wp-content/style.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.217.249.225 - - [07/Apr/2026:17:13:35 +0800] "GET /libraries/phpmailer/updates.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.225 - - [07/Apr/2026:17:13:35 +0800] "GET /nf_tracking.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.217.249.225 - - [07/Apr/2026:17:13:35 +0800] "GET /wp-admin/css/about.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.225 - - [07/Apr/2026:17:13:35 +0800] "GET /filefuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.217.249.225 - - [07/Apr/2026:17:13:36 +0800] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.217.249.225 - - [07/Apr/2026:17:13:36 +0800] "GET /l.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.217.249.225 - - [07/Apr/2026:17:13:36 +0800] "GET /repeater.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.217.249.225 - - [07/Apr/2026:17:13:37 +0800] "GET /wp-admin/wso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.217.249.225 - - [07/Apr/2026:17:13:37 +0800] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.202 - - [07/Apr/2026:17:13:39 +0800] "GET /contacts.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.202 - - [07/Apr/2026:17:13:39 +0800] "GET /wsa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.217.249.202 - - [07/Apr/2026:17:13:39 +0800] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.227 - - [07/Apr/2026:17:13:40 +0800] "GET /firewall.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.227 - - [07/Apr/2026:17:13:41 +0800] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.193 - - [07/Apr/2026:17:13:42 +0800] "GET /wp-content/uploads/content.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.217.249.193 - - [07/Apr/2026:17:13:43 +0800] "GET /lv.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.217.249.193 - - [07/Apr/2026:17:13:43 +0800] "GET /images/js1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.217.249.193 - - [07/Apr/2026:17:13:44 +0800] "GET /wp-admin/maint/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.193 - - [07/Apr/2026:17:13:44 +0800] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.193 - - [07/Apr/2026:17:13:44 +0800] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.217.249.193 - - [07/Apr/2026:17:13:45 +0800] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.204 - - [07/Apr/2026:17:13:46 +0800] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.217.249.184 - - [07/Apr/2026:17:13:47 +0800] "GET /wp-admin/theme-editor.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.217.249.184 - - [07/Apr/2026:17:13:47 +0800] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.184 - - [07/Apr/2026:17:13:48 +0800] "GET /wp-admin/maint/wonder.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.184 - - [07/Apr/2026:17:13:48 +0800] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 91.217.249.184 - - [07/Apr/2026:17:13:48 +0800] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.217.249.184 - - [07/Apr/2026:17:13:48 +0800] "GET /tox.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.184 - - [07/Apr/2026:17:13:49 +0800] "GET /wp-content/languages/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.217.249.184 - - [07/Apr/2026:17:13:49 +0800] "GET /wp-includes/js/dist/default.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.217.249.210 - - [07/Apr/2026:17:13:51 +0800] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.210 - - [07/Apr/2026:17:13:51 +0800] "GET /tiny.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.195 - - [07/Apr/2026:17:13:53 +0800] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.217.249.195 - - [07/Apr/2026:17:13:53 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.195 - - [07/Apr/2026:17:13:53 +0800] "GET /wp-themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.217.249.195 - - [07/Apr/2026:17:13:54 +0800] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.202.227 - - [07/Apr/2026:17:13:56 +0800] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.202.227 - - [07/Apr/2026:17:13:56 +0800] "GET /mariju.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.202.227 - - [07/Apr/2026:17:13:56 +0800] "GET /waf_defender.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.202.227 - - [07/Apr/2026:17:13:57 +0800] "GET /wp-admin/maint/cong.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.202.227 - - [07/Apr/2026:17:13:57 +0800] "GET /av.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.202.227 - - [07/Apr/2026:17:13:59 +0800] "GET /wp-admin/css/glex.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.202.227 - - [07/Apr/2026:17:13:59 +0800] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.202.227 - - [07/Apr/2026:17:13:59 +0800] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.210 - - [07/Apr/2026:17:14:01 +0800] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.217.249.210 - - [07/Apr/2026:17:14:01 +0800] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.217.249.210 - - [07/Apr/2026:17:14:02 +0800] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.217.249.210 - - [07/Apr/2026:17:14:02 +0800] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.214 - - [07/Apr/2026:17:14:04 +0800] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.217.249.214 - - [07/Apr/2026:17:14:04 +0800] "GET /theme.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.217.249.214 - - [07/Apr/2026:17:14:04 +0800] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.214 - - [07/Apr/2026:17:14:05 +0800] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.214 - - [07/Apr/2026:17:14:05 +0800] "GET /Simple.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.214 - - [07/Apr/2026:17:14:05 +0800] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.214 - - [07/Apr/2026:17:14:06 +0800] "GET /wp-admin/1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.214 - - [07/Apr/2026:17:14:06 +0800] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.214 - - [07/Apr/2026:17:14:07 +0800] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.214 - - [07/Apr/2026:17:14:07 +0800] "GET /.well-known/classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.214 - - [07/Apr/2026:17:14:07 +0800] "GET /css/av.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.214 - - [07/Apr/2026:17:14:08 +0800] "GET /images/waf_defender.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.217.249.214 - - [07/Apr/2026:17:14:08 +0800] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.217.249.204 - - [07/Apr/2026:17:14:09 +0800] "GET /small.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.217.249.204 - - [07/Apr/2026:17:14:09 +0800] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.206 - - [07/Apr/2026:17:14:11 +0800] "GET /NewFile.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.206 - - [07/Apr/2026:17:14:11 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.217.249.206 - - [07/Apr/2026:17:14:11 +0800] "GET /error.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.206 - - [07/Apr/2026:17:14:12 +0800] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.217.249.206 - - [07/Apr/2026:17:14:12 +0800] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.205 - - [07/Apr/2026:17:14:13 +0800] "GET /wp-content/languages/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.205 - - [07/Apr/2026:17:14:14 +0800] "GET /wp-files.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.217.249.205 - - [07/Apr/2026:17:14:14 +0800] "GET /functions.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.205 - - [07/Apr/2026:17:14:15 +0800] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.201 - - [07/Apr/2026:17:14:16 +0800] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.213 - - [07/Apr/2026:17:14:18 +0800] "GET /aks.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.217.249.213 - - [07/Apr/2026:17:14:18 +0800] "GET /litespeed.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.213 - - [07/Apr/2026:17:14:18 +0800] "GET /img/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.213 - - [07/Apr/2026:17:14:19 +0800] "GET /wp-includes/class-feed-index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.217.249.188 - - [07/Apr/2026:17:14:20 +0800] "GET /wpn.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.188 - - [07/Apr/2026:17:14:20 +0800] "GET /wp-content/classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.217.249.188 - - [07/Apr/2026:17:14:21 +0800] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.217.249.188 - - [07/Apr/2026:17:14:21 +0800] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.202.227 - - [07/Apr/2026:17:14:22 +0800] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.202.227 - - [07/Apr/2026:17:14:23 +0800] "GET /wp-includes/db.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.217.249.216 - - [07/Apr/2026:17:14:24 +0800] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.217.249.216 - - [07/Apr/2026:17:14:25 +0800] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.217.249.214 - - [07/Apr/2026:17:14:27 +0800] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.217.249.196 - - [07/Apr/2026:17:14:28 +0800] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.226 - - [07/Apr/2026:17:14:30 +0800] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.213 - - [07/Apr/2026:17:14:31 +0800] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.213 - - [07/Apr/2026:17:14:31 +0800] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.217.249.213 - - [07/Apr/2026:17:14:32 +0800] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.208 - - [07/Apr/2026:17:14:32 +0800] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.209 - - [07/Apr/2026:17:14:33 +0800] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.225 - - [07/Apr/2026:17:14:35 +0800] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.194 - - [07/Apr/2026:17:14:36 +0800] "GET /wp-includes/Text/options.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.202.208 - - [07/Apr/2026:17:14:38 +0800] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.202.208 - - [07/Apr/2026:17:14:38 +0800] "GET /wp-content/upgrade/cc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:14:38 +0800] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.202.208 - - [07/Apr/2026:17:14:39 +0800] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.202.208 - - [07/Apr/2026:17:14:39 +0800] "GET /wp-admin/includes/class_api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.202.208 - - [07/Apr/2026:17:14:39 +0800] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.202.208 - - [07/Apr/2026:17:14:40 +0800] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:14:40 +0800] "GET /wp-admin/css/wp-css.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:14:40 +0800] "GET /wp-includes/IXR/goto.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.200 - - [07/Apr/2026:17:14:43 +0800] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.217.249.200 - - [07/Apr/2026:17:14:43 +0800] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.200 - - [07/Apr/2026:17:14:44 +0800] "GET /Sanskrit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 91.217.249.200 - - [07/Apr/2026:17:14:44 +0800] "GET /wp-fmfile.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.200 - - [07/Apr/2026:17:14:44 +0800] "GET /.trash7309/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.217.249.200 - - [07/Apr/2026:17:14:45 +0800] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.200 - - [07/Apr/2026:17:14:45 +0800] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.217.249.200 - - [07/Apr/2026:17:14:46 +0800] "GET /memberfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.200 - - [07/Apr/2026:17:14:46 +0800] "GET /infos.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.217.249.200 - - [07/Apr/2026:17:14:46 +0800] "GET /modules/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.200 - - [07/Apr/2026:17:14:47 +0800] "GET /wp-content/x.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.200 - - [07/Apr/2026:17:14:47 +0800] "GET /wp-content/wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.200 - - [07/Apr/2026:17:14:47 +0800] "GET /options-writing.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.200 - - [07/Apr/2026:17:14:48 +0800] "GET /options-reading.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.217.249.200 - - [07/Apr/2026:17:14:48 +0800] "GET /wsad.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.200 - - [07/Apr/2026:17:14:49 +0800] "GET /nation.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.217.249.200 - - [07/Apr/2026:17:14:49 +0800] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.184 - - [07/Apr/2026:17:14:49 +0800] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.217 - - [07/Apr/2026:17:14:50 +0800] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 91.217.249.201 - - [07/Apr/2026:17:14:51 +0800] "GET /autoload_classmap/wso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.201 - - [07/Apr/2026:17:14:51 +0800] "GET /wp-atomx.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.201 - - [07/Apr/2026:17:14:51 +0800] "GET /admin-footer.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.201 - - [07/Apr/2026:17:14:52 +0800] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.201 - - [07/Apr/2026:17:14:52 +0800] "GET /XxX.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.201 - - [07/Apr/2026:17:14:52 +0800] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.217.249.201 - - [07/Apr/2026:17:14:53 +0800] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.217.249.183 - - [07/Apr/2026:17:14:54 +0800] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.218 - - [07/Apr/2026:17:14:56 +0800] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.222 - - [07/Apr/2026:17:14:57 +0800] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.222 - - [07/Apr/2026:17:14:58 +0800] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.217.249.222 - - [07/Apr/2026:17:14:58 +0800] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.222 - - [07/Apr/2026:17:14:58 +0800] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.222 - - [07/Apr/2026:17:14:59 +0800] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.217.249.212 - - [07/Apr/2026:17:15:00 +0800] "GET /css/media-widget-vide02.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.212 - - [07/Apr/2026:17:15:01 +0800] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 91.217.249.213 - - [07/Apr/2026:17:15:02 +0800] "GET /images/buy.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.217.249.213 - - [07/Apr/2026:17:15:02 +0800] "GET /templates/beez3/av.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.217.249.213 - - [07/Apr/2026:17:15:03 +0800] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.217.249.214 - - [07/Apr/2026:17:15:04 +0800] "GET /wp-admin/css/colors/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.214 - - [07/Apr/2026:17:15:04 +0800] "GET /plugins/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.214 - - [07/Apr/2026:17:15:05 +0800] "GET /.well-known/header.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 91.217.249.214 - - [07/Apr/2026:17:15:05 +0800] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.214 - - [07/Apr/2026:17:15:06 +0800] "GET /.well-known/pki-validation/server.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.217.249.214 - - [07/Apr/2026:17:15:06 +0800] "GET /autoload_classmap/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.214 - - [07/Apr/2026:17:15:06 +0800] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.214 - - [07/Apr/2026:17:15:07 +0800] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.214 - - [07/Apr/2026:17:15:07 +0800] "GET /wp-content/uploads/anas.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.217.249.214 - - [07/Apr/2026:17:15:08 +0800] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.214 - - [07/Apr/2026:17:15:08 +0800] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.214 - - [07/Apr/2026:17:15:08 +0800] "GET /wp-includes/Text/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.222 - - [07/Apr/2026:17:15:10 +0800] "GET /xex.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.222 - - [07/Apr/2026:17:15:11 +0800] "GET /wp-includes/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.198 - - [07/Apr/2026:17:15:13 +0800] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.198 - - [07/Apr/2026:17:15:13 +0800] "GET /upload/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.217.249.198 - - [07/Apr/2026:17:15:14 +0800] "GET /wp-head.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.198 - - [07/Apr/2026:17:15:14 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.217.249.198 - - [07/Apr/2026:17:15:15 +0800] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.198 - - [07/Apr/2026:17:15:15 +0800] "GET /makeasmtp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.198 - - [07/Apr/2026:17:15:15 +0800] "GET /wp-includes/wp-sup.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.191 - - [07/Apr/2026:17:15:16 +0800] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.191 - - [07/Apr/2026:17:15:16 +0800] "GET /images/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.191 - - [07/Apr/2026:17:15:17 +0800] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.217.249.207 - - [07/Apr/2026:17:15:18 +0800] "GET /wp-content/edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.217.249.207 - - [07/Apr/2026:17:15:19 +0800] "GET /.well-known/info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.207 - - [07/Apr/2026:17:15:19 +0800] "GET /wp-content/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.207 - - [07/Apr/2026:17:15:19 +0800] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.217.249.207 - - [07/Apr/2026:17:15:20 +0800] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.217.249.221 - - [07/Apr/2026:17:15:21 +0800] "GET /xp.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.221 - - [07/Apr/2026:17:15:21 +0800] "GET /wp-content/languages/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.217.249.221 - - [07/Apr/2026:17:15:22 +0800] "GET /wp-content/bypass_1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.217.249.221 - - [07/Apr/2026:17:15:22 +0800] "GET /wp-admin/js/elementskit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.221 - - [07/Apr/2026:17:15:23 +0800] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.198 - - [07/Apr/2026:17:15:24 +0800] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.217.249.198 - - [07/Apr/2026:17:15:24 +0800] "GET /click.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.217.249.198 - - [07/Apr/2026:17:15:25 +0800] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.217.249.192 - - [07/Apr/2026:17:15:27 +0800] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.217.249.189 - - [07/Apr/2026:17:15:28 +0800] "GET /wp-admin/css/colors/error.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.189 - - [07/Apr/2026:17:15:29 +0800] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.189 - - [07/Apr/2026:17:15:29 +0800] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.217.249.189 - - [07/Apr/2026:17:15:29 +0800] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 91.217.249.189 - - [07/Apr/2026:17:15:30 +0800] "GET /wp-admin/maint/repairs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.217.249.189 - - [07/Apr/2026:17:15:30 +0800] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.187 - - [07/Apr/2026:17:15:31 +0800] "GET /wp-admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.187 - - [07/Apr/2026:17:15:31 +0800] "GET /wp-header.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.217.249.187 - - [07/Apr/2026:17:15:31 +0800] "GET /file.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.217.249.187 - - [07/Apr/2026:17:15:32 +0800] "GET /.tmb/doc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.217.249.187 - - [07/Apr/2026:17:15:32 +0800] "GET /wp-editor.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.187 - - [07/Apr/2026:17:15:33 +0800] "GET /wp-includes/style-engine-session.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 91.217.249.199 - - [07/Apr/2026:17:15:35 +0800] "GET /images/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.199 - - [07/Apr/2026:17:15:35 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.217.249.199 - - [07/Apr/2026:17:15:35 +0800] "GET /adminfusm.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.199 - - [07/Apr/2026:17:15:36 +0800] "GET /js/js1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.199 - - [07/Apr/2026:17:15:36 +0800] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.209 - - [07/Apr/2026:17:15:37 +0800] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.188 - - [07/Apr/2026:17:15:39 +0800] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.188 - - [07/Apr/2026:17:15:39 +0800] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.217.249.183 - - [07/Apr/2026:17:15:40 +0800] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 91.217.249.183 - - [07/Apr/2026:17:15:41 +0800] "GET /about/function.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.183 - - [07/Apr/2026:17:15:41 +0800] "GET /wp-includes/images/install.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.217.249.223 - - [07/Apr/2026:17:15:43 +0800] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.185 - - [07/Apr/2026:17:15:44 +0800] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.217.249.185 - - [07/Apr/2026:17:15:44 +0800] "GET /f35_SpaceTn.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.185 - - [07/Apr/2026:17:15:44 +0800] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.185 - - [07/Apr/2026:17:15:45 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.185 - - [07/Apr/2026:17:15:45 +0800] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.185 - - [07/Apr/2026:17:15:46 +0800] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.185 - - [07/Apr/2026:17:15:46 +0800] "GET /wp-includes/category-double.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.202.227 - - [07/Apr/2026:17:15:47 +0800] "GET /wp-admin/maint/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.202.227 - - [07/Apr/2026:17:15:48 +0800] "GET /blog/signatur.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.202.227 - - [07/Apr/2026:17:15:48 +0800] "GET /wp-includes/assets/db.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.226 - - [07/Apr/2026:17:15:50 +0800] "GET /wp-includes/widgets/security.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.189 - - [07/Apr/2026:17:15:52 +0800] "GET /include/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.189 - - [07/Apr/2026:17:15:52 +0800] "GET /gm.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.189 - - [07/Apr/2026:17:15:53 +0800] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.217.249.224 - - [07/Apr/2026:17:15:54 +0800] "GET /js/content-type.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.224 - - [07/Apr/2026:17:15:55 +0800] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.193 - - [07/Apr/2026:17:15:56 +0800] "GET /about/goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 91.217.249.193 - - [07/Apr/2026:17:15:56 +0800] "GET /file/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.193 - - [07/Apr/2026:17:15:57 +0800] "GET /function/goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.193 - - [07/Apr/2026:17:15:57 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.193 - - [07/Apr/2026:17:15:58 +0800] "GET /wp-content/upgrade/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.217.249.193 - - [07/Apr/2026:17:15:58 +0800] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.189 - - [07/Apr/2026:17:16:00 +0800] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.189 - - [07/Apr/2026:17:16:01 +0800] "GET /plugin-install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.189 - - [07/Apr/2026:17:16:01 +0800] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.202.207 - - [07/Apr/2026:17:16:03 +0800] "GET /wp-admin/js/load.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.202.207 - - [07/Apr/2026:17:16:03 +0800] "GET /images/firewall.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.202.207 - - [07/Apr/2026:17:16:03 +0800] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.192 - - [07/Apr/2026:17:16:05 +0800] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.192 - - [07/Apr/2026:17:16:05 +0800] "GET /wp-includes/as.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.198 - - [07/Apr/2026:17:16:09 +0800] "GET /wp-content/item.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.198 - - [07/Apr/2026:17:16:09 +0800] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.217.249.203 - - [07/Apr/2026:17:16:11 +0800] "GET /wp-includes/install.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.189 - - [07/Apr/2026:17:16:12 +0800] "GET /wp-includes/customize/db.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.203 - - [07/Apr/2026:17:16:13 +0800] "GET /css/fan.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.217.249.203 - - [07/Apr/2026:17:16:14 +0800] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.217.249.203 - - [07/Apr/2026:17:16:14 +0800] "GET /images/mah.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.203 - - [07/Apr/2026:17:16:14 +0800] "GET /wp-content/waf_defender.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.203 - - [07/Apr/2026:17:16:15 +0800] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.217.249.203 - - [07/Apr/2026:17:16:15 +0800] "GET /wp-content/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.203 - - [07/Apr/2026:17:16:16 +0800] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.212 - - [07/Apr/2026:17:16:17 +0800] "GET /wp-content/content.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.217.249.212 - - [07/Apr/2026:17:16:17 +0800] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.217.249.212 - - [07/Apr/2026:17:16:18 +0800] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.212 - - [07/Apr/2026:17:16:18 +0800] "GET /wp-includes/rk2.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.224 - - [07/Apr/2026:17:16:20 +0800] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.217.249.224 - - [07/Apr/2026:17:16:20 +0800] "GET /b.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.224 - - [07/Apr/2026:17:16:21 +0800] "GET /wp-includes/certificates/past.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.202.227 - - [07/Apr/2026:17:16:22 +0800] "GET /css/as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.202.227 - - [07/Apr/2026:17:16:23 +0800] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.202.227 - - [07/Apr/2026:17:16:23 +0800] "GET /wp-includes/edit-tags.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.196 - - [07/Apr/2026:17:16:26 +0800] "GET /wsax.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.196 - - [07/Apr/2026:17:16:27 +0800] "GET /bless.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.196 - - [07/Apr/2026:17:16:27 +0800] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.217.249.196 - - [07/Apr/2026:17:16:27 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.217.249.196 - - [07/Apr/2026:17:16:28 +0800] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.196 - - [07/Apr/2026:17:16:28 +0800] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.217.249.210 - - [07/Apr/2026:17:16:29 +0800] "GET /wp-content/plugins/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.210 - - [07/Apr/2026:17:16:30 +0800] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.217.249.186 - - [07/Apr/2026:17:16:31 +0800] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.186 - - [07/Apr/2026:17:16:31 +0800] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.184 - - [07/Apr/2026:17:16:32 +0800] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.184 - - [07/Apr/2026:17:16:33 +0800] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.217.249.184 - - [07/Apr/2026:17:16:33 +0800] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.190 - - [07/Apr/2026:17:16:34 +0800] "GET /wp-admin/js/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.190 - - [07/Apr/2026:17:16:34 +0800] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:16:35 +0800] "GET /uploads/xsec.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:16:35 +0800] "GET /images/Marvins.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.190 - - [07/Apr/2026:17:16:36 +0800] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.190 - - [07/Apr/2026:17:16:37 +0800] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.190 - - [07/Apr/2026:17:16:37 +0800] "GET /wp-content/languages/radio.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.190 - - [07/Apr/2026:17:16:38 +0800] "GET /wp-content/uploads/fileman.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.217.249.190 - - [07/Apr/2026:17:16:38 +0800] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.202.206 - - [07/Apr/2026:17:16:39 +0800] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.217.249.189 - - [07/Apr/2026:17:16:41 +0800] "GET /admin.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.217.249.189 - - [07/Apr/2026:17:16:41 +0800] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.189 - - [07/Apr/2026:17:16:41 +0800] "GET /wp-admin/maint/byps.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.189 - - [07/Apr/2026:17:16:41 +0800] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.217.249.199 - - [07/Apr/2026:17:16:43 +0800] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.217.249.219 - - [07/Apr/2026:17:16:44 +0800] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.217.249.219 - - [07/Apr/2026:17:16:45 +0800] "GET /wp-admin/network/class.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.217.249.219 - - [07/Apr/2026:17:16:45 +0800] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.217.249.203 - - [07/Apr/2026:17:16:46 +0800] "GET /wp-includes/ms-file.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.198 - - [07/Apr/2026:17:16:47 +0800] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.198 - - [07/Apr/2026:17:16:48 +0800] "GET /wp-includes/widgets/av.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 91.217.249.215 - - [07/Apr/2026:17:16:49 +0800] "GET /chosen.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.215 - - [07/Apr/2026:17:16:49 +0800] "GET /bs1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.217.249.215 - - [07/Apr/2026:17:16:50 +0800] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.226 - - [07/Apr/2026:17:16:51 +0800] "GET /wp-includes/network.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 91.217.249.214 - - [07/Apr/2026:17:16:53 +0800] "GET /page.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.214 - - [07/Apr/2026:17:16:53 +0800] "GET /wp-admin/includes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.214 - - [07/Apr/2026:17:16:54 +0800] "GET /wp-content/uploads/chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.214 - - [07/Apr/2026:17:16:54 +0800] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.214 - - [07/Apr/2026:17:16:54 +0800] "GET /wp-content/admin-footer.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.217.249.214 - - [07/Apr/2026:17:16:54 +0800] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.214 - - [07/Apr/2026:17:16:55 +0800] "GET /assets/info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 91.217.249.214 - - [07/Apr/2026:17:16:55 +0800] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.199 - - [07/Apr/2026:17:16:57 +0800] "GET /wp-includes/pomo/item.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.191 - - [07/Apr/2026:17:16:58 +0800] "GET /wp-content/1.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.191 - - [07/Apr/2026:17:16:58 +0800] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 91.217.249.191 - - [07/Apr/2026:17:16:58 +0800] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.217 - - [07/Apr/2026:17:17:00 +0800] "GET /wp-includes/assets/install.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.189 - - [07/Apr/2026:17:17:01 +0800] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.189 - - [07/Apr/2026:17:17:01 +0800] "GET /wp-admin/css/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.189 - - [07/Apr/2026:17:17:02 +0800] "GET /images/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.217.249.189 - - [07/Apr/2026:17:17:02 +0800] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.191 - - [07/Apr/2026:17:17:03 +0800] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 91.217.249.191 - - [07/Apr/2026:17:17:04 +0800] "GET /wp-admin/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.191 - - [07/Apr/2026:17:17:04 +0800] "GET /wp-admin/css/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.217.249.191 - - [07/Apr/2026:17:17:04 +0800] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.201 - - [07/Apr/2026:17:17:06 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.217.249.201 - - [07/Apr/2026:17:17:06 +0800] "GET /wp-includes/rest-api/1.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.202.226 - - [07/Apr/2026:17:17:07 +0800] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.205 - - [07/Apr/2026:17:17:08 +0800] "GET /shop.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.217.249.205 - - [07/Apr/2026:17:17:08 +0800] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.217.249.205 - - [07/Apr/2026:17:17:09 +0800] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.205 - - [07/Apr/2026:17:17:09 +0800] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.225 - - [07/Apr/2026:17:17:10 +0800] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.225 - - [07/Apr/2026:17:17:11 +0800] "GET /wp-admin/user/header.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.217.249.225 - - [07/Apr/2026:17:17:11 +0800] "GET /wp-includes/IXR/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.186 - - [07/Apr/2026:17:17:12 +0800] "GET /wp-api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.217.249.186 - - [07/Apr/2026:17:17:13 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.186 - - [07/Apr/2026:17:17:13 +0800] "GET /css.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.186 - - [07/Apr/2026:17:17:14 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.217.249.186 - - [07/Apr/2026:17:17:14 +0800] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.195 - - [07/Apr/2026:17:17:15 +0800] "GET /wp-includes/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:17:17 +0800] "GET /images/fm.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.190 - - [07/Apr/2026:17:17:17 +0800] "GET /wp-includes/count.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.217.249.212 - - [07/Apr/2026:17:17:18 +0800] "GET /wp-error_log.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.212 - - [07/Apr/2026:17:17:19 +0800] "GET /assets/class_update_plugins.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.212 - - [07/Apr/2026:17:17:19 +0800] "GET /wp-admin/network/av.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.217.249.212 - - [07/Apr/2026:17:17:19 +0800] "GET /templates/beez5/error.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.212 - - [07/Apr/2026:17:17:20 +0800] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.217.249.212 - - [07/Apr/2026:17:17:20 +0800] "GET /js/firewall.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.212 - - [07/Apr/2026:17:17:20 +0800] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.191 - - [07/Apr/2026:17:17:22 +0800] "GET /assets/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.191 - - [07/Apr/2026:17:17:22 +0800] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 91.217.249.191 - - [07/Apr/2026:17:17:23 +0800] "GET /images/stories/themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.191 - - [07/Apr/2026:17:17:23 +0800] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.209 - - [07/Apr/2026:17:17:26 +0800] "GET /wp-includes/firewall.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.209 - - [07/Apr/2026:17:17:26 +0800] "GET /home/O-Simple.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.209 - - [07/Apr/2026:17:17:27 +0800] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 91.217.249.209 - - [07/Apr/2026:17:17:28 +0800] "GET /wp-includes/vars-soap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.196 - - [07/Apr/2026:17:17:29 +0800] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.217.249.196 - - [07/Apr/2026:17:17:29 +0800] "GET /style.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 91.217.249.196 - - [07/Apr/2026:17:17:30 +0800] "GET /files.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.217.249.196 - - [07/Apr/2026:17:17:30 +0800] "GET /wp-content/themes/av.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.196 - - [07/Apr/2026:17:17:31 +0800] "GET /wp-admin/css/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.196 - - [07/Apr/2026:17:17:31 +0800] "GET /saka.phP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.196 - - [07/Apr/2026:17:17:31 +0800] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.202 - - [07/Apr/2026:17:17:33 +0800] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.202 - - [07/Apr/2026:17:17:33 +0800] "GET /baxa1.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.202 - - [07/Apr/2026:17:17:33 +0800] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.220 - - [07/Apr/2026:17:17:35 +0800] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.220 - - [07/Apr/2026:17:17:35 +0800] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.217.249.214 - - [07/Apr/2026:17:17:36 +0800] "GET /blog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.214 - - [07/Apr/2026:17:17:37 +0800] "GET /about/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.217.249.214 - - [07/Apr/2026:17:17:38 +0800] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.214 - - [07/Apr/2026:17:17:38 +0800] "GET /wp-admin/network/chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.217.249.214 - - [07/Apr/2026:17:17:39 +0800] "GET /images/av.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.217.249.214 - - [07/Apr/2026:17:17:39 +0800] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.220 - - [07/Apr/2026:17:17:40 +0800] "GET /wp-includes/colour.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.226 - - [07/Apr/2026:17:17:42 +0800] "GET /elp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.217.249.226 - - [07/Apr/2026:17:17:42 +0800] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.217.249.201 - - [07/Apr/2026:17:17:43 +0800] "GET /wp-includes/images/include.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.225 - - [07/Apr/2026:17:17:44 +0800] "GET /wp-content/themes/av.php.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.217.249.225 - - [07/Apr/2026:17:17:45 +0800] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.217.249.225 - - [07/Apr/2026:17:17:45 +0800] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.217.249.221 - - [07/Apr/2026:17:17:46 +0800] "GET /upload/bilder/cong.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.217.249.221 - - [07/Apr/2026:17:17:46 +0800] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.221 - - [07/Apr/2026:17:17:47 +0800] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.217.249.218 - - [07/Apr/2026:17:17:48 +0800] "GET /wp-includes/assets/about5.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.187 - - [07/Apr/2026:17:17:49 +0800] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.187 - - [07/Apr/2026:17:17:50 +0800] "GET /wp-content/cong.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.217.249.187 - - [07/Apr/2026:17:17:50 +0800] "GET /js/db.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.187 - - [07/Apr/2026:17:17:51 +0800] "GET /.well-known/buy.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.187 - - [07/Apr/2026:17:17:51 +0800] "GET /wp-includes/ID3/db.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.187 - - [07/Apr/2026:17:17:52 +0800] "GET /function/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.217.249.187 - - [07/Apr/2026:17:17:52 +0800] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.217.249.187 - - [07/Apr/2026:17:17:53 +0800] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.216 - - [07/Apr/2026:17:17:54 +0800] "GET /testt.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 91.217.249.216 - - [07/Apr/2026:17:17:55 +0800] "GET /wp-content/uploads/goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.217.249.216 - - [07/Apr/2026:17:17:55 +0800] "GET /wp-admin/js/sad.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.217.249.216 - - [07/Apr/2026:17:17:55 +0800] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.182 - - [07/Apr/2026:17:17:56 +0800] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:17:57 +0800] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 91.217.249.200 - - [07/Apr/2026:17:17:58 +0800] "GET /network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.200 - - [07/Apr/2026:17:17:58 +0800] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 91.217.249.200 - - [07/Apr/2026:17:17:59 +0800] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.202.209 - - [07/Apr/2026:17:18:00 +0800] "GET /wikindex.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.202.209 - - [07/Apr/2026:17:18:00 +0800] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.202.209 - - [07/Apr/2026:17:18:01 +0800] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.217.249.203 - - [07/Apr/2026:17:18:02 +0800] "GET /wp-includes/css/dist/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 91.217.249.182 - - [07/Apr/2026:17:18:03 +0800] "GET /wp-content/as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.182 - - [07/Apr/2026:17:18:04 +0800] "GET /wp-includes/customize/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.217.249.201 - - [07/Apr/2026:17:18:05 +0800] "GET /wp-includes/js/simi.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.217.249.224 - - [07/Apr/2026:17:18:07 +0800] "GET /wp-admin/images/chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.217.249.224 - - [07/Apr/2026:17:18:08 +0800] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.217.249.224 - - [07/Apr/2026:17:18:08 +0800] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.202.207 - - [07/Apr/2026:17:18:09 +0800] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.202.207 - - [07/Apr/2026:17:18:09 +0800] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.199 - - [07/Apr/2026:17:18:11 +0800] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.202.208 - - [07/Apr/2026:17:18:12 +0800] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.210 - - [07/Apr/2026:17:18:13 +0800] "GET /wp-admin/css/chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.217.249.210 - - [07/Apr/2026:17:18:14 +0800] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.217.249.210 - - [07/Apr/2026:17:18:14 +0800] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.210 - - [07/Apr/2026:17:18:15 +0800] "GET /wp-content/alam.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.217.249.210 - - [07/Apr/2026:17:18:16 +0800] "GET /css/adminfusm.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.210 - - [07/Apr/2026:17:18:16 +0800] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.227 - - [07/Apr/2026:17:18:17 +0800] "GET /wp-content/raw.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.227 - - [07/Apr/2026:17:18:18 +0800] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.225 - - [07/Apr/2026:17:18:19 +0800] "GET /wp-admin/includes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.217.249.225 - - [07/Apr/2026:17:18:19 +0800] "GET /wp-includes/customize/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 91.217.249.224 - - [07/Apr/2026:17:18:21 +0800] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.224 - - [07/Apr/2026:17:18:21 +0800] "GET /wp-admin/media-new.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.224 - - [07/Apr/2026:17:18:21 +0800] "GET /media-new.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.217.249.224 - - [07/Apr/2026:17:18:22 +0800] "GET /js/class_api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.224 - - [07/Apr/2026:17:18:22 +0800] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.224 - - [07/Apr/2026:17:18:22 +0800] "GET /admin/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.224 - - [07/Apr/2026:17:18:23 +0800] "GET /wp-includes/plugin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.200 - - [07/Apr/2026:17:18:24 +0800] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.182 - - [07/Apr/2026:17:18:25 +0800] "GET /wp-admin/js/item.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.217.249.182 - - [07/Apr/2026:17:18:25 +0800] "GET /pages.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.182 - - [07/Apr/2026:17:18:25 +0800] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.217.249.193 - - [07/Apr/2026:17:18:27 +0800] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.193 - - [07/Apr/2026:17:18:29 +0800] "GET /uploads/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.217.249.193 - - [07/Apr/2026:17:18:29 +0800] "GET /assets/js/doc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.193 - - [07/Apr/2026:17:18:30 +0800] "GET /assets/comfunctions.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.193 - - [07/Apr/2026:17:18:30 +0800] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.183 - - [07/Apr/2026:17:18:31 +0800] "GET /css/adminfus.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.183 - - [07/Apr/2026:17:18:31 +0800] "GET /adminfus.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.217.249.183 - - [07/Apr/2026:17:18:32 +0800] "GET /wp-includes/css/litespeed.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.217.249.220 - - [07/Apr/2026:17:18:33 +0800] "GET /images/as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.217.249.220 - - [07/Apr/2026:17:18:33 +0800] "GET /wp-admin/setup-config.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.220 - - [07/Apr/2026:17:18:34 +0800] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.223 - - [07/Apr/2026:17:18:35 +0800] "GET /cong.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.217.249.223 - - [07/Apr/2026:17:18:35 +0800] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.217.249.206 - - [07/Apr/2026:17:18:36 +0800] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.217.249.206 - - [07/Apr/2026:17:18:37 +0800] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.210 - - [07/Apr/2026:17:18:38 +0800] "GET /css/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.217.249.210 - - [07/Apr/2026:17:18:38 +0800] "GET /assets/av.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.217.249.210 - - [07/Apr/2026:17:18:39 +0800] "GET /autoload_classmap/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.210 - - [07/Apr/2026:17:18:39 +0800] "GET /wp-configs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.210 - - [07/Apr/2026:17:18:39 +0800] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.191 - - [07/Apr/2026:17:18:40 +0800] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.191 - - [07/Apr/2026:17:18:41 +0800] "GET /wp-admin/network/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 91.217.249.191 - - [07/Apr/2026:17:18:41 +0800] "GET /wp-admin/item.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.191 - - [07/Apr/2026:17:18:41 +0800] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.196 - - [07/Apr/2026:17:18:42 +0800] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.196 - - [07/Apr/2026:17:18:43 +0800] "GET /wp-includes/ID3/shell.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.207 - - [07/Apr/2026:17:18:44 +0800] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.184 - - [07/Apr/2026:17:18:46 +0800] "GET /ms-users.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.217.249.184 - - [07/Apr/2026:17:18:46 +0800] "GET /wp-admin/js/cc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.184 - - [07/Apr/2026:17:18:46 +0800] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.217.249.207 - - [07/Apr/2026:17:18:47 +0800] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.219 - - [07/Apr/2026:17:18:49 +0800] "GET /css/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.217.249.219 - - [07/Apr/2026:17:18:49 +0800] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.219 - - [07/Apr/2026:17:18:49 +0800] "GET /wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.219 - - [07/Apr/2026:17:18:50 +0800] "GET /assets/content.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.217.249.219 - - [07/Apr/2026:17:18:50 +0800] "GET /fm.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.219 - - [07/Apr/2026:17:18:51 +0800] "GET /wp-content/goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.219 - - [07/Apr/2026:17:18:51 +0800] "GET /wp-includes/wp-2019.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.186 - - [07/Apr/2026:17:18:52 +0800] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.217.249.196 - - [07/Apr/2026:17:18:53 +0800] "GET /assets/images/cloud.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.196 - - [07/Apr/2026:17:18:53 +0800] "GET /wp-includes/log.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.207 - - [07/Apr/2026:17:18:54 +0800] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.217.249.223 - - [07/Apr/2026:17:18:55 +0800] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.202.207 - - [07/Apr/2026:17:18:56 +0800] "GET /wp-includes/aw.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.184 - - [07/Apr/2026:17:18:57 +0800] "GET /update/gely.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.217.249.184 - - [07/Apr/2026:17:18:58 +0800] "GET /uploads/c99shell.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.184 - - [07/Apr/2026:17:18:58 +0800] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.217.249.184 - - [07/Apr/2026:17:18:58 +0800] "GET /uploads/lala.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.184 - - [07/Apr/2026:17:18:59 +0800] "GET /wp-includes/IXR/db.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.226 - - [07/Apr/2026:17:18:59 +0800] "GET /wp-includes/css/install.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.217.249.225 - - [07/Apr/2026:17:19:00 +0800] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.225 - - [07/Apr/2026:17:19:00 +0800] "GET /top.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.217.249.225 - - [07/Apr/2026:17:19:01 +0800] "GET /wp-includes/css/dist/install.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.217.249.223 - - [07/Apr/2026:17:19:01 +0800] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.196 - - [07/Apr/2026:17:19:02 +0800] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.196 - - [07/Apr/2026:17:19:02 +0800] "GET /wp-content/click.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 91.217.249.196 - - [07/Apr/2026:17:19:03 +0800] "GET /wp-includes/template-less.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.202 - - [07/Apr/2026:17:19:03 +0800] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.202.209 - - [07/Apr/2026:17:19:05 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.202.209 - - [07/Apr/2026:17:19:05 +0800] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.202.209 - - [07/Apr/2026:17:19:05 +0800] "GET /retu11.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.202.209 - - [07/Apr/2026:17:19:05 +0800] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.202.209 - - [07/Apr/2026:17:19:06 +0800] "GET /wp-admin/css/elementskit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.202.209 - - [07/Apr/2026:17:19:06 +0800] "GET /js/1.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.202.209 - - [07/Apr/2026:17:19:06 +0800] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.202.209 - - [07/Apr/2026:17:19:07 +0800] "GET /wp-includes/assets/min.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.187 - - [07/Apr/2026:17:19:08 +0800] "GET /wp-includes/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.217.249.186 - - [07/Apr/2026:17:19:09 +0800] "GET /backup/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.217.249.186 - - [07/Apr/2026:17:19:09 +0800] "GET /wp-content/uploads/uploads.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.217.249.186 - - [07/Apr/2026:17:19:09 +0800] "GET /wp-includes/file.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.202 - - [07/Apr/2026:17:19:10 +0800] "GET /wp-content/themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.202 - - [07/Apr/2026:17:19:11 +0800] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.222 - - [07/Apr/2026:17:19:11 +0800] "GET /worm0.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.217.249.222 - - [07/Apr/2026:17:19:12 +0800] "GET /wp-includes/load.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.204 - - [07/Apr/2026:17:19:13 +0800] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.217.249.182 - - [07/Apr/2026:17:19:14 +0800] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.187 - - [07/Apr/2026:17:19:15 +0800] "GET /images/c99.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.217.249.187 - - [07/Apr/2026:17:19:15 +0800] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.187 - - [07/Apr/2026:17:19:16 +0800] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.187 - - [07/Apr/2026:17:19:16 +0800] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.202.209 - - [07/Apr/2026:17:19:17 +0800] "GET /setup-config.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.202.209 - - [07/Apr/2026:17:19:17 +0800] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.187 - - [07/Apr/2026:17:19:18 +0800] "GET /wp-content/uploads/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.187 - - [07/Apr/2026:17:19:18 +0800] "GET /type.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.187 - - [07/Apr/2026:17:19:19 +0800] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.202.208 - - [07/Apr/2026:17:19:19 +0800] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.187 - - [07/Apr/2026:17:19:21 +0800] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.208 - - [07/Apr/2026:17:19:22 +0800] "GET /wp-admin/maint/flex.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.217.249.208 - - [07/Apr/2026:17:19:22 +0800] "GET /css/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.217.249.208 - - [07/Apr/2026:17:19:22 +0800] "GET /wp-admin/user/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.208 - - [07/Apr/2026:17:19:22 +0800] "GET /files/shares/403ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.217.249.208 - - [07/Apr/2026:17:19:23 +0800] "GET /goat.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.208 - - [07/Apr/2026:17:19:23 +0800] "GET /images/fix.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.208 - - [07/Apr/2026:17:19:23 +0800] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.217.249.208 - - [07/Apr/2026:17:19:24 +0800] "GET /files.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.208 - - [07/Apr/2026:17:19:24 +0800] "GET /wp-includes/assets/system.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.191 - - [07/Apr/2026:17:19:25 +0800] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.191 - - [07/Apr/2026:17:19:25 +0800] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.185 - - [07/Apr/2026:17:19:26 +0800] "GET /images/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.185 - - [07/Apr/2026:17:19:26 +0800] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.217.249.185 - - [07/Apr/2026:17:19:26 +0800] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.190 - - [07/Apr/2026:17:19:27 +0800] "GET /wp-includes/ID3/simi.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.202.226 - - [07/Apr/2026:17:19:28 +0800] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.202.208 - - [07/Apr/2026:17:19:29 +0800] "GET /admin/assets/plugins/jQuery-File-Upload/server/php/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:19:29 +0800] "GET /de-ideale-stookmix/wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.202.208 - - [07/Apr/2026:17:19:29 +0800] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.222 - - [07/Apr/2026:17:19:31 +0800] "GET /wp-content/plugins/wps-hide-login/wps-hide-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.222 - - [07/Apr/2026:17:19:31 +0800] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.222 - - [07/Apr/2026:17:19:31 +0800] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.222 - - [07/Apr/2026:17:19:31 +0800] "GET /assets/images/accesson.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.222 - - [07/Apr/2026:17:19:32 +0800] "GET /wp-content/plugins/wp-plugin/wp-plugin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.222 - - [07/Apr/2026:17:19:32 +0800] "GET /assets/plugins/jQuery-File-Upload/server/php/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.217.249.222 - - [07/Apr/2026:17:19:32 +0800] "GET /wp-content/plugins/wp-default/sh/member.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.222 - - [07/Apr/2026:17:19:33 +0800] "GET /wp-includes/ms-pie.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.219 - - [07/Apr/2026:17:19:33 +0800] "GET /.well-known/logs233/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.217.249.219 - - [07/Apr/2026:17:19:33 +0800] "GET /assets/plugins/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.219 - - [07/Apr/2026:17:19:34 +0800] "GET /wp-content/plugins/wp-security-scan/secure.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.217.249.219 - - [07/Apr/2026:17:19:34 +0800] "GET /owncloud/status.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.219 - - [07/Apr/2026:17:19:34 +0800] "GET /wp-includes/html-api/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.220 - - [07/Apr/2026:17:19:35 +0800] "GET /wp-content/uploads/autodiagnosis.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.220 - - [07/Apr/2026:17:19:35 +0800] "GET /wp-content/plugins/all-in-one-wp-security-and-firewall/templates/wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.217.249.220 - - [07/Apr/2026:17:19:35 +0800] "GET /wp-includes/nav-menu.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.217.249.201 - - [07/Apr/2026:17:19:36 +0800] "GET /wp-includes/css/dist/user.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.223 - - [07/Apr/2026:17:19:37 +0800] "GET /wp-content/plugins/pwnd/file-js.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.217.249.223 - - [07/Apr/2026:17:19:37 +0800] "GET /wp-content/mu-plugins/helper.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.217.249.223 - - [07/Apr/2026:17:19:37 +0800] "GET /wp-admin/images/archive.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.223 - - [07/Apr/2026:17:19:37 +0800] "GET /wp-admin/css/bolt.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 91.217.249.223 - - [07/Apr/2026:17:19:38 +0800] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.223 - - [07/Apr/2026:17:19:38 +0800] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.217.249.223 - - [07/Apr/2026:17:19:38 +0800] "GET /templates/protostar/error.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.223 - - [07/Apr/2026:17:19:39 +0800] "GET /libraries/joomla/jmails.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.223 - - [07/Apr/2026:17:19:39 +0800] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.223 - - [07/Apr/2026:17:19:39 +0800] "GET /wp-content/plugins/w3-total-cache/pub/sns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.217.249.223 - - [07/Apr/2026:17:19:39 +0800] "GET /wp-content/plugins/Ultimate_VC_Addons/assets/alfa-rex.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.217.249.223 - - [07/Apr/2026:17:19:40 +0800] "GET /wp-includes/js/dist/script-modules/block-library/search/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:19:41 +0800] "GET /wp-includes/customize/class-wp-customize-cropped-image-control.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.202.226 - - [07/Apr/2026:17:19:41 +0800] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.202.209 - - [07/Apr/2026:17:19:42 +0800] "GET /wp-content/admin-header.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.202.209 - - [07/Apr/2026:17:19:42 +0800] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.202.209 - - [07/Apr/2026:17:19:42 +0800] "GET /wp-content/uploads/system_core.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.202.209 - - [07/Apr/2026:17:19:43 +0800] "GET /wp-includes/css/dist/preferences/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.217.249.219 - - [07/Apr/2026:17:19:44 +0800] "GET /wp-includes/blocks/media-text/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.217 - - [07/Apr/2026:17:19:44 +0800] "GET /wp-includes/phpmailer/phpmailer.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.207 - - [07/Apr/2026:17:19:45 +0800] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.217.249.207 - - [07/Apr/2026:17:19:45 +0800] "GET /plus/90sec.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.207 - - [07/Apr/2026:17:19:46 +0800] "GET /.trash7206/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.207 - - [07/Apr/2026:17:19:46 +0800] "GET /storage/framework/views/core.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.207 - - [07/Apr/2026:17:19:46 +0800] "GET /wp-content/plugins/filester/assets/css/404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.207 - - [07/Apr/2026:17:19:46 +0800] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 91.217.249.207 - - [07/Apr/2026:17:19:47 +0800] "GET /wp-includes/blocks/latest-comments/template-loader.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.217.249.203 - - [07/Apr/2026:17:19:47 +0800] "GET /wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.217.249.203 - - [07/Apr/2026:17:19:48 +0800] "GET /wp-content/wpvivid_uploads/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.203 - - [07/Apr/2026:17:19:48 +0800] "GET /wp-content/plugins/hello-plus/classes/ehp-sarang.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.203 - - [07/Apr/2026:17:19:48 +0800] "GET /wp-content/themes/news-portal/fm.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.217.249.203 - - [07/Apr/2026:17:19:48 +0800] "GET /wp-admin/dofault.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.217.249.203 - - [07/Apr/2026:17:19:49 +0800] "GET /wp-content/themes/theme-check/main.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.203 - - [07/Apr/2026:17:19:49 +0800] "GET /wp-content/plugins/advanced-product-fields-for-woocommerce/db.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.217.249.203 - - [07/Apr/2026:17:19:49 +0800] "GET /wp-includes/blocks/nextpage/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.194 - - [07/Apr/2026:17:19:50 +0800] "GET /wp-content/plugins/akismet/views/cmd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.194 - - [07/Apr/2026:17:19:50 +0800] "GET /wp-admin/includes/nav-menu-trigger.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.194 - - [07/Apr/2026:17:19:51 +0800] "GET /wp-includes/link-template-firewall.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.220 - - [07/Apr/2026:17:19:52 +0800] "GET /assets/plugins/plupload/examples/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.220 - - [07/Apr/2026:17:19:52 +0800] "GET /libraries/vendor/updates.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.217.249.220 - - [07/Apr/2026:17:19:52 +0800] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.220 - - [07/Apr/2026:17:19:52 +0800] "GET /themes/fitnessbase/404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.217.249.220 - - [07/Apr/2026:17:19:53 +0800] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.220 - - [07/Apr/2026:17:19:53 +0800] "GET /libraries/legacy/updates.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.220 - - [07/Apr/2026:17:19:53 +0800] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.217.249.220 - - [07/Apr/2026:17:19:54 +0800] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.220 - - [07/Apr/2026:17:19:54 +0800] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.220 - - [07/Apr/2026:17:19:54 +0800] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.217.249.220 - - [07/Apr/2026:17:19:54 +0800] "GET /css/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.217.249.220 - - [07/Apr/2026:17:19:55 +0800] "GET /assets/global/plugins/plupload/examples/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.220 - - [07/Apr/2026:17:19:55 +0800] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.193 - - [07/Apr/2026:17:19:55 +0800] "GET /wp-includes/SimplePie/src/Decode/HTML/sitemaps.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.190 - - [07/Apr/2026:17:19:56 +0800] "GET /wp-includes/mer_gagal.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.211 - - [07/Apr/2026:17:19:57 +0800] "GET /wp-includes/html-api/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.217.249.207 - - [07/Apr/2026:17:19:58 +0800] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.207 - - [07/Apr/2026:17:19:58 +0800] "GET /wp-content/uploads/link.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.207 - - [07/Apr/2026:17:19:58 +0800] "GET /wp-content/uploads/plugins.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.207 - - [07/Apr/2026:17:19:59 +0800] "GET /wp-includes/rest-api/alfa-rex.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.202.209 - - [07/Apr/2026:17:20:01 +0800] "GET /wp-includes/ID3/Core32.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.217.249.192 - - [07/Apr/2026:17:20:02 +0800] "GET /wp-content/themes/classic/inc/json.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.192 - - [07/Apr/2026:17:20:02 +0800] "GET /admin/editor/engine.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.192 - - [07/Apr/2026:17:20:02 +0800] "GET /wp-admin/post-new.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.192 - - [07/Apr/2026:17:20:02 +0800] "GET /lib/functions.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.192 - - [07/Apr/2026:17:20:03 +0800] "GET /Assets/edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.192 - - [07/Apr/2026:17:20:03 +0800] "GET /wp-includes/theme-compat/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.217.249.195 - - [07/Apr/2026:17:20:04 +0800] "GET /assets/bootstrap-fileupload/lock2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.217.249.195 - - [07/Apr/2026:17:20:04 +0800] "GET /wp-content/plugins/envato-market/inc/class-envato-market-github.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.195 - - [07/Apr/2026:17:20:04 +0800] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.217.249.195 - - [07/Apr/2026:17:20:05 +0800] "GET /assets/jquery-ui/images/lock2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.217.249.195 - - [07/Apr/2026:17:20:05 +0800] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.217.249.201 - - [07/Apr/2026:17:20:06 +0800] "GET /wp-includes/Requests/library/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.202.208 - - [07/Apr/2026:17:20:07 +0800] "GET /update/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.202.208 - - [07/Apr/2026:17:20:07 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.202.208 - - [07/Apr/2026:17:20:08 +0800] "GET /wp-admin/maint/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.202.208 - - [07/Apr/2026:17:20:08 +0800] "GET /themes/zMousse/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.202.208 - - [07/Apr/2026:17:20:08 +0800] "GET /wp-content/plugins/ubh/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.202.208 - - [07/Apr/2026:17:20:09 +0800] "GET /wp-admin/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.202.208 - - [07/Apr/2026:17:20:09 +0800] "GET /images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:09 +0800] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.202.208 - - [07/Apr/2026:17:20:12 +0800] "GET /wp-content/themes/pridmag/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.202.208 - - [07/Apr/2026:17:20:13 +0800] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.202.208 - - [07/Apr/2026:17:20:13 +0800] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:13 +0800] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:14 +0800] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.202.208 - - [07/Apr/2026:17:20:14 +0800] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:14 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.202.208 - - [07/Apr/2026:17:20:15 +0800] "GET /wp-includes/style-engine/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.202.208 - - [07/Apr/2026:17:20:15 +0800] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:15 +0800] "GET /wp-content/plugins/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:15 +0800] "GET /uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.202.208 - - [07/Apr/2026:17:20:16 +0800] "GET /js/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.202.208 - - [07/Apr/2026:17:20:16 +0800] "GET /.well-known/pki-validation/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.202.208 - - [07/Apr/2026:17:20:16 +0800] "GET /wp-includes/js/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.202.208 - - [07/Apr/2026:17:20:17 +0800] "GET /wp-content/upgrade/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:17 +0800] "GET /wp-content/languages/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.202.208 - - [07/Apr/2026:17:20:17 +0800] "GET /wp-content/themes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:17 +0800] "GET /wp-content/plugins/elementor/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.202.208 - - [07/Apr/2026:17:20:18 +0800] "GET /wp-includes/IXR/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.202.208 - - [07/Apr/2026:17:20:18 +0800] "GET /wp-includes/widgets/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:18 +0800] "GET /admin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.202.208 - - [07/Apr/2026:17:20:19 +0800] "GET /wp-includes/images/smilies/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:19 +0800] "GET /wp-includes/js/crop/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:19 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.202.208 - - [07/Apr/2026:17:20:20 +0800] "GET /files/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:20 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.202.208 - - [07/Apr/2026:17:20:20 +0800] "GET /wp-admin/js/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:20 +0800] "GET /wp-includes/js/jquery/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:21 +0800] "GET /wp-includes/block-supports/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:21 +0800] "GET /wp-admin/network/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.202.208 - - [07/Apr/2026:17:20:21 +0800] "GET /wp-admin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:22 +0800] "GET /wp-includes/blocks/table/int/tmpl/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:22 +0800] "GET /wp-includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:22 +0800] "GET /wp-includes/customize/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.202.208 - - [07/Apr/2026:17:20:22 +0800] "GET /wp-includes/SimplePie/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.202.208 - - [07/Apr/2026:17:20:23 +0800] "GET /wp-includes/theme-compat/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:23 +0800] "GET /wp-includes/Requests/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:23 +0800] "GET /wp-includes/ID3/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:23 +0800] "GET /wp-content/x/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.202.208 - - [07/Apr/2026:17:20:24 +0800] "GET /wp-includes/assets/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:24 +0800] "GET /wp-includes/fonts/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:24 +0800] "GET /autoload_classmap/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.202.208 - - [07/Apr/2026:17:20:25 +0800] "GET /wp-content/themes/tflow/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.202.208 - - [07/Apr/2026:17:20:25 +0800] "GET /templates/beez3/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.202.208 - - [07/Apr/2026:17:20:25 +0800] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.202.208 - - [07/Apr/2026:17:20:25 +0800] "GET /components/com_jea/views/form/tmpl/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:26 +0800] "GET /templates/beez/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.202.208 - - [07/Apr/2026:17:20:26 +0800] "GET /wp-admin/css/colors/light/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.202.208 - - [07/Apr/2026:17:20:26 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.202.208 - - [07/Apr/2026:17:20:27 +0800] "GET /wp-includes/rest-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:27 +0800] "GET /css/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:27 +0800] "GET /wp-admin/user/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.202.208 - - [07/Apr/2026:17:20:27 +0800] "GET /assets/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.202.208 - - [07/Apr/2026:17:20:28 +0800] "GET /wp-admin/css/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:28 +0800] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:28 +0800] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:29 +0800] "GET /wp-content/plugins/up/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:29 +0800] "GET /fonts/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:29 +0800] "GET /wp-admin/includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:29 +0800] "GET /images/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:30 +0800] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.202.208 - - [07/Apr/2026:17:20:30 +0800] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:30 +0800] "GET /wp-includes/pomo/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:31 +0800] "GET /wp-content/themes/twentytwentythree/patterns/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:31 +0800] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:31 +0800] "GET /wp-includes/block-patterns/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:31 +0800] "GET /wp-includes/certificates/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:32 +0800] "GET /wp-content/cache/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:32 +0800] "GET /assets/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:32 +0800] "GET /wp-admin/js/widgets/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.202.208 - - [07/Apr/2026:17:20:33 +0800] "GET /wp-includes/random_compat/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.202.208 - - [07/Apr/2026:17:20:33 +0800] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:33 +0800] "GET /wp-includes/images/media/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:33 +0800] "GET /wp-includes/css/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.202.208 - - [07/Apr/2026:17:20:34 +0800] "GET /wp-content/plugins/phpadmin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.202.208 - - [07/Apr/2026:17:20:34 +0800] "GET /wp-content/plugins/seoo/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.202.208 - - [07/Apr/2026:17:20:34 +0800] "GET /wp-content/plugins/view-more/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.202.208 - - [07/Apr/2026:17:20:35 +0800] "GET /wp-admin/css/colors/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.202.208 - - [07/Apr/2026:17:20:35 +0800] "GET /wp-content/themes/seotheme/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.202.208 - - [07/Apr/2026:17:20:35 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.202.208 - - [07/Apr/2026:17:20:35 +0800] "GET /wp-content/plugins/ioxi/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.202.208 - - [07/Apr/2026:17:20:36 +0800] "GET /blog/wp-content/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.202.208 - - [07/Apr/2026:17:20:36 +0800] "GET /.well-known/acme-challenge/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:36 +0800] "GET /wp-content/themes/astra/inc/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:37 +0800] "GET /wp-content/plugins/ccx/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.202.208 - - [07/Apr/2026:17:20:37 +0800] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.202.208 - - [07/Apr/2026:17:20:37 +0800] "GET /wp-includes/Requests/src/Exception/Http/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:37 +0800] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.202.208 - - [07/Apr/2026:17:20:38 +0800] "GET /wp-includes/Text/Diff/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.202.208 - - [07/Apr/2026:17:20:38 +0800] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.202.208 - - [07/Apr/2026:17:20:38 +0800] "GET /wp-content/themes/twentytwentytwo/assets/fonts/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.202.208 - - [07/Apr/2026:17:20:38 +0800] "GET /blog/wp-includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.202.208 - - [07/Apr/2026:17:20:39 +0800] "GET /blog/wp-admin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:39 +0800] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.190 - - [07/Apr/2026:17:20:40 +0800] "GET /wp-includes/blocks/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.190 - - [07/Apr/2026:17:20:40 +0800] "GET /.bod/.ll/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:40 +0800] "GET /wp-content/themes/twentytwentytwo/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:40 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.190 - - [07/Apr/2026:17:20:41 +0800] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.190 - - [07/Apr/2026:17:20:41 +0800] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:41 +0800] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.190 - - [07/Apr/2026:17:20:42 +0800] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:42 +0800] "GET /wp-content/plugins/fix/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.217.249.190 - - [07/Apr/2026:17:20:42 +0800] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.217.249.190 - - [07/Apr/2026:17:20:42 +0800] "GET /wp-includes/bk/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:43 +0800] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:43 +0800] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:43 +0800] "GET /wp-content/themes/hello-element/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.217.249.190 - - [07/Apr/2026:17:20:44 +0800] "GET /wp-includes/Text/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:44 +0800] "GET /wp-includes/sitemaps/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:44 +0800] "GET /wp-includes/sodium_compat/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:44 +0800] "GET /wp-includes/js/dist/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:45 +0800] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.190 - - [07/Apr/2026:17:20:45 +0800] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:45 +0800] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:46 +0800] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:46 +0800] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:46 +0800] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 91.217.249.190 - - [07/Apr/2026:17:20:47 +0800] "GET /wp-content/languages/themes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.190 - - [07/Apr/2026:17:20:47 +0800] "GET /admin/controller/extension/extension/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.217.249.190 - - [07/Apr/2026:17:20:47 +0800] "GET /img/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:47 +0800] "GET /wp-includes/interactivity-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:48 +0800] "GET /wp-includes/l10n/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:48 +0800] "GET /tinyfilemanager/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:48 +0800] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:48 +0800] "GET /components/com_newsfeeds/models/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:49 +0800] "GET /.trash7309/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.217.249.190 - - [07/Apr/2026:17:20:49 +0800] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:49 +0800] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.190 - - [07/Apr/2026:17:20:50 +0800] "GET /modules/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:50 +0800] "GET /wp-includes/js/codemirror/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:50 +0800] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.190 - - [07/Apr/2026:17:20:50 +0800] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.217.249.190 - - [07/Apr/2026:17:20:51 +0800] "GET /wp-includes/blocks/group/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:51 +0800] "GET /plugins/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:51 +0800] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.190 - - [07/Apr/2026:17:20:52 +0800] "GET /upload/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:52 +0800] "GET /wordpress/wp-includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:52 +0800] "GET /wp-includes/css/dist/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:52 +0800] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:53 +0800] "GET /.tmb/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.217.249.190 - - [07/Apr/2026:17:20:53 +0800] "GET /wp-includes/assets/wp-includes/assets/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:53 +0800] "GET /wp-includes/blocks/file/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:54 +0800] "GET /wp-content/mu-plugins/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:54 +0800] "GET /blog/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.217.249.190 - - [07/Apr/2026:17:20:54 +0800] "GET /include/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:54 +0800] "GET /file/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.217.249.190 - - [07/Apr/2026:17:20:55 +0800] "GET /wp-content/themes/twentytwentyfour/patterns/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:55 +0800] "GET /images/news_event/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.190 - - [07/Apr/2026:17:20:55 +0800] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.190 - - [07/Apr/2026:17:20:55 +0800] "GET /templates/beez5/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.217.249.190 - - [07/Apr/2026:17:20:56 +0800] "GET /wp-admin/js/file/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:56 +0800] "GET /wp-includes/id3/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:56 +0800] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.190 - - [07/Apr/2026:17:20:57 +0800] "GET /upload/bilder/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.217.249.190 - - [07/Apr/2026:17:20:57 +0800] "GET /wp-includes/Requests/Text/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.217.249.190 - - [07/Apr/2026:17:20:57 +0800] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.217.249.190 - - [07/Apr/2026:17:20:57 +0800] "GET /wp-includes/js/jcrop/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.190 - - [07/Apr/2026:17:20:58 +0800] "GET /wp-content/uploads/2021/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.190 - - [07/Apr/2026:17:20:58 +0800] "GET /assets/js/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:58 +0800] "GET /wp-includes/block-bindings/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.190 - - [07/Apr/2026:17:20:58 +0800] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:59 +0800] "GET /wp-includes/Requests/library/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.190 - - [07/Apr/2026:17:20:59 +0800] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:20:59 +0800] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.190 - - [07/Apr/2026:17:21:00 +0800] "GET /backup/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:21:00 +0800] "GET /files/shares/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:21:00 +0800] "GET /wp-content/plugins/xt/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:21:01 +0800] "GET /wp-content/plugins/content-management/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:21:01 +0800] "GET /wp-content/themes/Avada/licensing/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.217.249.190 - - [07/Apr/2026:17:21:01 +0800] "GET /Requests/Utility/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.217.249.190 - - [07/Apr/2026:17:21:01 +0800] "GET /themes/travelscape/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.190 - - [07/Apr/2026:17:21:02 +0800] "GET /themes/twentyseventeen/page/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:21:02 +0800] "GET /rest-api/fields/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.190 - - [07/Apr/2026:17:21:02 +0800] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:21:03 +0800] "GET /wp-content/plugins/tunnelforms/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.217.249.190 - - [07/Apr/2026:17:21:03 +0800] "GET /wp-content/languages/plugins/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.190 - - [07/Apr/2026:17:21:03 +0800] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:21:04 +0800] "GET /wp-includes/js/tinymce/utils/%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:21:04 +0800] "GET /themes/seotheme/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:21:04 +0800] "GET /wp-includes/js/jquery/ui/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.190 - - [07/Apr/2026:17:21:05 +0800] "GET /js/tinymce/utils/%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:21:05 +0800] "GET /Requests/Exception/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.217.249.190 - - [07/Apr/2026:17:21:05 +0800] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:21:05 +0800] "GET /wp-json/wp/v2/give_forms/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:21:06 +0800] "GET /wp-content/plugins/ultimate-member/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.190 - - [07/Apr/2026:17:21:06 +0800] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:21:06 +0800] "GET /wp-content/themes/travelscape/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.190 - - [07/Apr/2026:17:21:06 +0800] "GET /wp-includes/js/plupload/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:21:07 +0800] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:21:07 +0800] "GET /wp-includes/images/wlw/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.190 - - [07/Apr/2026:17:21:07 +0800] "GET /wp-includes/blocks/code/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.190 - - [07/Apr/2026:17:21:08 +0800] "GET /wp-includes/blocks/archives/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.217.249.190 - - [07/Apr/2026:17:21:08 +0800] "GET /wp-includes/css/dist/components/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.183 - - [07/Apr/2026:17:21:08 +0800] "GET /wp-content/plugins/js-support-ticket/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.183 - - [07/Apr/2026:17:21:09 +0800] "GET /wp-content/plugins/easy-themes-manager/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.183 - - [07/Apr/2026:17:21:09 +0800] "GET /wp-content/settings/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.217.249.183 - - [07/Apr/2026:17:21:09 +0800] "GET /wp-includes/blocks/pullquote/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.183 - - [07/Apr/2026:17:21:10 +0800] "GET /wp-content/plugins/shell/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.217.249.183 - - [07/Apr/2026:17:21:10 +0800] "GET /wp-admin/images/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.217.249.183 - - [07/Apr/2026:17:21:10 +0800] "GET /wp-includes/blocks/comments-pagination-numbers/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.217.249.183 - - [07/Apr/2026:17:21:10 +0800] "GET /wp-admin/user/interactivity-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.183 - - [07/Apr/2026:17:21:11 +0800] "GET /assets/bootstrap-fileupload/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.217.249.183 - - [07/Apr/2026:17:21:11 +0800] "GET /wp-content/plugins/yanierin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 91.217.249.183 - - [07/Apr/2026:17:21:11 +0800] "GET /wp-content/themes/hideo/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.217.249.183 - - [07/Apr/2026:17:21:12 +0800] "GET /wp-content/plugins/profile-builder/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.183 - - [07/Apr/2026:17:21:12 +0800] "GET /wp-content/plugins/plugin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.183 - - [07/Apr/2026:17:21:12 +0800] "GET /wp-admin/network/cache/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.217.249.183 - - [07/Apr/2026:17:21:12 +0800] "GET /wp-includes/blocks/details/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.183 - - [07/Apr/2026:17:21:13 +0800] "GET /wp-includes/blocks/post-terms/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.217.249.183 - - [07/Apr/2026:17:21:13 +0800] "GET /wp-includes/theme-compat/network/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.217.249.183 - - [07/Apr/2026:17:21:13 +0800] "GET /wp-includes/js/dist/development/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 91.217.249.183 - - [07/Apr/2026:17:21:14 +0800] "GET /management/assets/assets/css/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.217.249.183 - - [07/Apr/2026:17:21:14 +0800] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.183 - - [07/Apr/2026:17:21:14 +0800] "GET /wordpress/wp-includes/blocks/accordion/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.217.249.183 - - [07/Apr/2026:17:21:14 +0800] "GET /assets/worders_front/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.183 - - [07/Apr/2026:17:21:15 +0800] "GET /assets/jquery-ui/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.217.249.183 - - [07/Apr/2026:17:21:15 +0800] "GET /wp-content/uploads/2024/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.183 - - [07/Apr/2026:17:21:15 +0800] "GET /wp-content/themes/Avada/includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.217.249.183 - - [07/Apr/2026:17:21:15 +0800] "GET /wp-content/uploads/fusion-forms/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.217.249.183 - - [07/Apr/2026:17:21:16 +0800] "GET /wp-content/themes/Avada/includes/lib/inc/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.183 - - [07/Apr/2026:17:21:16 +0800] "GET /wp-content/themes/jupiter/framework/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.217.249.183 - - [07/Apr/2026:17:21:16 +0800] "GET /wp-includes/blocks/site-title/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.217.249.183 - - [07/Apr/2026:17:21:17 +0800] "GET /wp-content/plugins/jupiterx-core/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.183 - - [07/Apr/2026:17:21:17 +0800] "GET /wp-content/themes/Avada/shortcodes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 91.217.249.183 - - [07/Apr/2026:17:21:17 +0800] "GET /wp-json/bricks/v1/render_element/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.217.249.183 - - [07/Apr/2026:17:21:17 +0800] "GET /wp-content/themes/bricks/includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.183 - - [07/Apr/2026:17:21:18 +0800] "GET /wp-content/themes/service-finder/inc/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.183 - - [07/Apr/2026:17:21:18 +0800] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.183 - - [07/Apr/2026:17:21:18 +0800] "GET /wp-content/themes/service-finder/admin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.183 - - [07/Apr/2026:17:21:19 +0800] "GET /wp-json/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.217.249.183 - - [07/Apr/2026:17:21:19 +0800] "GET /wp-json/wp/v2/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.183 - - [07/Apr/2026:17:21:19 +0800] "GET /wp-content/uploads/2025/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.217.249.183 - - [07/Apr/2026:17:21:19 +0800] "GET /wp-content/uploads/2026/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.183 - - [07/Apr/2026:17:21:20 +0800] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 13.208.216.64 - - [07/Apr/2026:20:18:12 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:13 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:13 +0800] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:13 +0800] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:14 +0800] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:14 +0800] "GET /.env.staging HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:15 +0800] "GET /.env.development HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:16 +0800] "GET /.env.test HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:16 +0800] "GET /.env.remote HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:17 +0800] "GET /.env.bak HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:17 +0800] "GET /.env.backup HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:18 +0800] "GET /.env.save HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:18 +0800] "GET /.env.old HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:19 +0800] "GET /.env.sample HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:20 +0800] "GET /.env.example HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:20 +0800] "GET /.env.dev HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:21 +0800] "GET /.env.prod HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:21 +0800] "GET /.env.stage HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:22 +0800] "GET /.env.ci HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:22 +0800] "GET /.env.docker HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:23 +0800] "GET /.env.live HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:24 +0800] "GET /.env.preprod HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:24 +0800] "GET /.env.uat HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:25 +0800] "GET /.env.dist HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:25 +0800] "GET /.env.swp HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:26 +0800] "GET /.env~ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:26 +0800] "GET /app/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:27 +0800] "GET /apps/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:27 +0800] "GET /api/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:28 +0800] "GET /web/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.208.216.64 - - [07/Apr/2026:20:18:29 +0800] "GET /site/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 74.7.175.136 - - [07/Apr/2026:22:59:25 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.175.136 - - [07/Apr/2026:23:25:23 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.230.32 - - [07/Apr/2026:23:52:31 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 158.69.227.165 - - [08/Apr/2026:00:25:33 +0800] "GET /.well-known/acme-challenge/4ecdf4fa8b8bca654e21fdf5950fc255key HTTP/1.0" 200 33 "-" "-" 74.7.227.141 - - [08/Apr/2026:00:27:17 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.241.150 - - [08/Apr/2026:02:41:09 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 20.111.44.155 - - [08/Apr/2026:05:34:45 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:45 +0800] "GET /green.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:46 +0800] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:46 +0800] "GET /qiumnpor3orjwr6me3zmgqCdefault.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:46 +0800] "GET /zoper1.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:46 +0800] "GET /5xkfgawzejgwqh9hiaznCdefault.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:47 +0800] "GET /file61.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:47 +0800] "GET /term.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:47 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:47 +0800] "GET /tx78.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:48 +0800] "GET /wmore1.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:48 +0800] "GET /dass.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:48 +0800] "GET /lib.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:48 +0800] "GET /wp9.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:49 +0800] "GET /pass4.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:49 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:50 +0800] "GET /8573.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:50 +0800] "GET /torsa1.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:50 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:50 +0800] "GET /gfd.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:51 +0800] "GET /asasx.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:51 +0800] "GET /gptsh.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:51 +0800] "GET /666.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:51 +0800] "GET /ws86.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:51 +0800] "GET /byypas.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:52 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:52 +0800] "GET /mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:52 +0800] "GET /q7lhrgzoo7ijhnkcedq2Cdefault.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:52 +0800] "GET /exhds0ucw0ju9vjgasxqCdefault.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:53 +0800] "GET /lmutxdvyp7u5yksqke8ozbjgCdefault.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:53 +0800] "GET /bless.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:53 +0800] "GET /bolt.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:53 +0800] "GET /wp5.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:54 +0800] "GET //wp.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:54 +0800] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:54 +0800] "GET /CDX1.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:54 +0800] "GET /ta0ol.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:55 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:55 +0800] "GET /tx79.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:55 +0800] "GET /Sanskrit.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:55 +0800] "GET /Ov-Simple1.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:55 +0800] "GET /wlld5fjtdpjmjhsds3qzmipfCdefault.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:56 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:56 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:56 +0800] "GET /ws88.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:56 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:57 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:57 +0800] "GET /rithin.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:57 +0800] "GET //nw.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:57 +0800] "GET /motu.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:58 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:58 +0800] "GET /ibcqocdtu3eovdx2hwj7Cdefault.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:58 +0800] "GET /gifclass.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:58 +0800] "GET /ws85.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:59 +0800] "GET /ws87.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:59 +0800] "GET /ortasekerli1.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:59 +0800] "GET /new3.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:34:59 +0800] "GET /sid3.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:35:00 +0800] "GET /wp-png.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:35:00 +0800] "GET /t2gorhwasq4vioshtatw5eCdefault.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:35:00 +0800] "GET /kj.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:35:00 +0800] "GET /b4txckoieeyhynhsrpi9lCdefault.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:35:01 +0800] "GET /CDX2.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:35:01 +0800] "GET /wziar1.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:35:01 +0800] "GET /ogifomnzqnlvwh5womfjirvaCdefault.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:35:01 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:35:01 +0800] "GET /8daf1238_1774208172.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:35:02 +0800] "GET /xsas.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:35:02 +0800] "GET /a4.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:35:02 +0800] "GET /jga.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:35:02 +0800] "GET /buc.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:35:03 +0800] "GET /Cap.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:35:03 +0800] "GET /jlex.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:35:03 +0800] "GET /gpt-sh.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:35:03 +0800] "GET /tfm.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:35:04 +0800] "GET /uuu.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:35:04 +0800] "GET /hhxc.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:35:04 +0800] "GET /0yellow.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:35:04 +0800] "GET /only.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:35:05 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:35:05 +0800] "GET /wtiiy.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:35:05 +0800] "GET /gvg1bvpsgtot1rpklCdefault.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:35:05 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:35:06 +0800] "GET /irpl4xz4fmlzm4tlvvu4h1mCdefault.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:35:06 +0800] "GET /myfile.php HTTP/1.1" 403 261 "-" "-" 20.111.44.155 - - [08/Apr/2026:05:35:06 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 68.221.128.217 - - [08/Apr/2026:09:43:14 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 68.221.128.217 - - [08/Apr/2026:09:43:14 +0800] "GET /aevly.php HTTP/1.1" 403 261 "-" "-" 68.221.128.217 - - [08/Apr/2026:09:43:15 +0800] "GET /bogles.php HTTP/1.1" 403 261 "-" "-" 68.221.128.217 - - [08/Apr/2026:09:43:15 +0800] "GET /.well-known/index.php HTTP/1.1" 403 261 "-" "-" 68.221.128.217 - - [08/Apr/2026:09:43:15 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 68.221.128.217 - - [08/Apr/2026:09:43:15 +0800] "GET /co.php HTTP/1.1" 403 261 "-" "-" 68.221.128.217 - - [08/Apr/2026:09:43:15 +0800] "GET /database.php HTTP/1.1" 403 261 "-" "-" 68.221.128.217 - - [08/Apr/2026:09:43:16 +0800] "GET /css/database.php HTTP/1.1" 403 261 "-" "-" 68.221.128.217 - - [08/Apr/2026:09:43:16 +0800] "GET /x123.php HTTP/1.1" 403 261 "-" "-" 68.221.128.217 - - [08/Apr/2026:09:43:16 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "-" 44.244.154.237 - - [08/Apr/2026:10:04:39 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)" 44.244.154.237 - - [08/Apr/2026:10:04:39 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)" 165.232.106.168 - - [08/Apr/2026:16:36:18 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 165.232.106.168 - - [08/Apr/2026:16:36:18 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "http://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 165.232.106.168 - - [08/Apr/2026:16:36:19 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 165.232.106.168 - - [08/Apr/2026:16:36:25 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "https://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 158.69.227.165 - - [09/Apr/2026:00:26:26 +0800] "GET /.well-known/acme-challenge/516c811534e5502eaed44b3f42e62740key HTTP/1.0" 200 33 "-" "-" 72.146.17.168 - - [09/Apr/2026:01:36:13 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 72.146.17.168 - - [09/Apr/2026:01:36:13 +0800] "GET /error.php HTTP/1.1" 403 261 "-" "-" 4.223.70.230 - - [09/Apr/2026:03:08:38 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 4.223.70.230 - - [09/Apr/2026:03:08:38 +0800] "GET /shadow-bot.php HTTP/1.1" 403 261 "-" "-" 4.223.70.230 - - [09/Apr/2026:03:08:39 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "-" 4.223.70.230 - - [09/Apr/2026:03:08:39 +0800] "GET /zxcs.php HTTP/1.1" 403 261 "-" "-" 4.223.70.230 - - [09/Apr/2026:03:08:39 +0800] "GET /btx25.php HTTP/1.1" 403 261 "-" "-" 4.223.70.230 - - [09/Apr/2026:03:08:39 +0800] "GET /ca-022.php HTTP/1.1" 403 261 "-" "-" 4.223.70.230 - - [09/Apr/2026:03:08:41 +0800] "GET /rnenu.php HTTP/1.1" 403 261 "-" "-" 20.63.32.44 - - [09/Apr/2026:05:03:54 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.63.32.44 - - [09/Apr/2026:05:03:54 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "-" 176.227.240.19 - - [09/Apr/2026:14:06:29 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/118.0.2" 176.227.240.19 - - [09/Apr/2026:14:06:31 +0800] "GET /administrator/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/120.0.1" 138.246.253.24 - - [09/Apr/2026:16:58:32 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 74.7.241.50 - - [09/Apr/2026:19:53:40 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.230.48 - - [09/Apr/2026:19:53:40 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 158.158.97.185 - - [09/Apr/2026:21:00:46 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:47 +0800] "GET //xfile25.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:47 +0800] "GET /xff.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:47 +0800] "GET /azs.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:47 +0800] "GET /lupo.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:48 +0800] "GET /awa.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:48 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:48 +0800] "GET /popo.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:48 +0800] "GET /syndicate.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:49 +0800] "GET /wp-block.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:49 +0800] "GET /ll.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:49 +0800] "GET /wp-cxx.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:49 +0800] "GET /water.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:50 +0800] "GET /12.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:50 +0800] "GET /ggb.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:50 +0800] "GET /13.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:51 +0800] "GET /wert.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:51 +0800] "GET /11.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:51 +0800] "GET /p.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:51 +0800] "GET /oij98gy.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:52 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:52 +0800] "GET /turkshell.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:52 +0800] "GET /tea.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:52 +0800] "GET /qqa.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:53 +0800] "GET /seo.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:53 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:53 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:53 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:54 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:54 +0800] "GET /3.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:54 +0800] "GET /4.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:55 +0800] "GET /5.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:55 +0800] "GET /6.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:56 +0800] "GET /9.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:57 +0800] "GET /10.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:57 +0800] "GET /.mopj.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:57 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:58 +0800] "GET /nano.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:58 +0800] "GET /f35_S.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:58 +0800] "GET /2026w.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:59 +0800] "GET /111.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:59 +0800] "GET /wp1.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:00:59 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:00 +0800] "GET /byrgo.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:00 +0800] "GET //xwpg.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:00 +0800] "GET /ass.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:00 +0800] "GET //about.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:01 +0800] "GET /no18.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:01 +0800] "GET /fine.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:01 +0800] "GET /zample.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:02 +0800] "GET /hplfuns.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:02 +0800] "GET /xa.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:02 +0800] "GET //admin.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:03 +0800] "GET /inege.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:03 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:03 +0800] "GET /uuu.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:04 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:04 +0800] "GET /no1.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:04 +0800] "GET /w2025.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:04 +0800] "GET /fvvff.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:05 +0800] "GET /a2.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:05 +0800] "GET //edit.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:05 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:05 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:06 +0800] "GET /66.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:06 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:07 +0800] "GET /ol.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:07 +0800] "GET //f6.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:07 +0800] "GET //inputs.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:07 +0800] "GET /style.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:08 +0800] "GET //aa.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:08 +0800] "GET //av.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:08 +0800] "GET /wp-admin/css/bolt.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:09 +0800] "GET /bless4.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:09 +0800] "GET /wp-act.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:09 +0800] "GET /xqq.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:09 +0800] "GET /plss3.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:10 +0800] "GET /aaa.php?p= HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:10 +0800] "GET /classwithtostring.php?p= HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:10 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:11 +0800] "GET /tinyfilemanager.php?p= HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:11 +0800] "GET /wp-update.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:11 +0800] "GET /sbhu.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:11 +0800] "GET /wp-blog.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:12 +0800] "GET //wp-includes/js/jquery/ HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:12 +0800] "GET //wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:12 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:13 +0800] "GET //adminfuns.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:13 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:13 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:13 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:14 +0800] "GET //cgi-bin/index.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:14 +0800] "GET /fff.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:14 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:14 +0800] "GET /we.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:15 +0800] "GET /alpha.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:15 +0800] "GET /makeasmtp.php?p= HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:15 +0800] "GET /wp-michan.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:16 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:16 +0800] "GET //wp-includes/css/dist/ HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:16 +0800] "GET /BDKR28WP.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:17 +0800] "GET //wp-includes/l10n/ HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:18 +0800] "GET /wen.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:18 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:18 +0800] "GET /wp-admin/js/fi.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:18 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:19 +0800] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:19 +0800] "GET /av.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:19 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:19 +0800] "GET /fi.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:20 +0800] "GET //a1.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:20 +0800] "GET /update/f35.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:20 +0800] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 199 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:23 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:23 +0800] "GET //wp-includes/css/index.php?p= HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:23 +0800] "GET /wp-includes/SimplePie/ HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:23 +0800] "GET /prv8.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:24 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:24 +0800] "GET /dev.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:24 +0800] "GET /bal.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:25 +0800] "GET /in.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:25 +0800] "GET /gssdd.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:25 +0800] "GET /motu.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:25 +0800] "GET /bs1.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:26 +0800] "GET /bengi.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:26 +0800] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:26 +0800] "GET /axx.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:27 +0800] "GET /alfashell.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:27 +0800] "GET /gettest.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:27 +0800] "GET /acp.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:27 +0800] "GET /file48.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:28 +0800] "GET /g.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:28 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:28 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:28 +0800] "GET /ew.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:29 +0800] "GET /file21.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:29 +0800] "GET /class19.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:29 +0800] "GET /class20.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:30 +0800] "GET /file18.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:30 +0800] "GET /vee.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:30 +0800] "GET /cabs.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:30 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:31 +0800] "GET /x1da.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:31 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "-" 158.158.97.185 - - [09/Apr/2026:21:01:31 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "-" 158.69.227.165 - - [10/Apr/2026:00:25:57 +0800] "GET /.well-known/acme-challenge/43d7a0d49f9bf8d9dcbdc8db1916d8fakey HTTP/1.0" 200 33 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:41 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:41 +0800] "GET /green.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:41 +0800] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:42 +0800] "GET /qiumnpor3orjwr6me3zmgqCdefault.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:42 +0800] "GET /zoper1.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:43 +0800] "GET /5xkfgawzejgwqh9hiaznCdefault.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:43 +0800] "GET /file61.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:43 +0800] "GET /term.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:43 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:44 +0800] "GET /tx78.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:44 +0800] "GET /wmore1.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:44 +0800] "GET /dass.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:45 +0800] "GET /lib.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:45 +0800] "GET /wp9.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:45 +0800] "GET /pass4.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:45 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:46 +0800] "GET /8573.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:46 +0800] "GET /torsa1.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:46 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:46 +0800] "GET /gfd.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:47 +0800] "GET /asasx.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:47 +0800] "GET /gptsh.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:47 +0800] "GET /666.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:47 +0800] "GET /ws86.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:48 +0800] "GET /byypas.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:48 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:48 +0800] "GET /mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:49 +0800] "GET /q7lhrgzoo7ijhnkcedq2Cdefault.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:51 +0800] "GET /exhds0ucw0ju9vjgasxqCdefault.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:51 +0800] "GET /lmutxdvyp7u5yksqke8ozbjgCdefault.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:51 +0800] "GET /bless.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:51 +0800] "GET /bolt.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:52 +0800] "GET /wp5.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:52 +0800] "GET //wp.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:52 +0800] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:53 +0800] "GET /CDX1.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:53 +0800] "GET /ta0ol.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:54 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:54 +0800] "GET /tx79.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:54 +0800] "GET /Sanskrit.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:54 +0800] "GET /Ov-Simple1.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:55 +0800] "GET /wlld5fjtdpjmjhsds3qzmipfCdefault.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:55 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:55 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:56 +0800] "GET /ws88.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:56 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:56 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:56 +0800] "GET /rithin.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:57 +0800] "GET //nw.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:57 +0800] "GET /motu.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:57 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:57 +0800] "GET /ibcqocdtu3eovdx2hwj7Cdefault.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:58 +0800] "GET /gifclass.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:58 +0800] "GET /ws85.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:58 +0800] "GET /ws87.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:59 +0800] "GET /ortasekerli1.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:59 +0800] "GET /new3.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:59 +0800] "GET /sid3.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:35:59 +0800] "GET /wp-png.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:36:00 +0800] "GET /t2gorhwasq4vioshtatw5eCdefault.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:36:00 +0800] "GET /kj.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:36:00 +0800] "GET /b4txckoieeyhynhsrpi9lCdefault.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:36:00 +0800] "GET /CDX2.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:36:01 +0800] "GET /wziar1.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:36:01 +0800] "GET /ogifomnzqnlvwh5womfjirvaCdefault.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:36:01 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:36:01 +0800] "GET /8daf1238_1774208172.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:36:02 +0800] "GET /xsas.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:36:02 +0800] "GET /a4.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:36:02 +0800] "GET /jga.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:36:03 +0800] "GET /buc.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:36:03 +0800] "GET /Cap.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:36:03 +0800] "GET /jlex.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:36:03 +0800] "GET /gpt-sh.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:36:04 +0800] "GET /tfm.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:36:04 +0800] "GET /uuu.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:36:04 +0800] "GET /hhxc.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:36:04 +0800] "GET /0yellow.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:36:05 +0800] "GET /only.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:36:05 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:36:05 +0800] "GET /wtiiy.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:36:05 +0800] "GET /gvg1bvpsgtot1rpklCdefault.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:36:06 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:36:06 +0800] "GET /irpl4xz4fmlzm4tlvvu4h1mCdefault.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:36:06 +0800] "GET /myfile.php HTTP/1.1" 403 261 "-" "-" 4.225.204.246 - - [10/Apr/2026:03:36:07 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 85.11.167.108 - - [10/Apr/2026:13:25:43 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 18.201.76.132 - - [10/Apr/2026:13:45:35 +0800] "GET / HTTP/1.0" 403 261 "-" "Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; +info@netcraft.com)" 34.254.161.54 - - [10/Apr/2026:14:48:45 +0800] "GET / HTTP/1.0" 403 261 "-" "Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; +info@netcraft.com)" 51.103.21.74 - - [10/Apr/2026:18:29:54 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:29:54 +0800] "GET /press.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:29:54 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:29:54 +0800] "GET /ga.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:29:55 +0800] "GET /less.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:29:55 +0800] "GET /x3x.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:29:55 +0800] "GET /wp-includes/Ipv6.php HTTP/1.1" 403 199 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:29:56 +0800] "GET /state.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:29:56 +0800] "GET /xozx.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:29:56 +0800] "GET /1100.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:29:56 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:29:57 +0800] "GET /97.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:29:57 +0800] "GET /file-gertdxz.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:29:57 +0800] "GET /aboute.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:29:57 +0800] "GET /lv.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:29:57 +0800] "GET /config.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:29:58 +0800] "GET /tx79.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:29:58 +0800] "GET /9.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:29:58 +0800] "GET /ng.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:29:58 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:00 +0800] "GET /wswer1.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:00 +0800] "GET /saorix1.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:01 +0800] "GET /wgift1.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:01 +0800] "GET /img.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:01 +0800] "GET /new3.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:01 +0800] "GET /wp-turn.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:01 +0800] "GET /ayk.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:02 +0800] "GET /red.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:02 +0800] "GET /ss.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:02 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:02 +0800] "GET /gecko.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:03 +0800] "GET /wziar1.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:03 +0800] "GET /xs.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:04 +0800] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 403 199 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:05 +0800] "GET /pp.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:05 +0800] "GET /myy.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:05 +0800] "GET /tiny.php HTTP/1.1" 403 199 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:06 +0800] "GET /wdone1.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:06 +0800] "GET /xff.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:06 +0800] "GET /wsheet1.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:07 +0800] "GET /ccs.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:07 +0800] "GET /wps.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:07 +0800] "GET /wmore1.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:07 +0800] "GET /ggb.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:07 +0800] "GET /tiny2.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:08 +0800] "GET /ava.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:08 +0800] "GET /awh.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:08 +0800] "GET /r2.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:08 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:09 +0800] "GET /db.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:09 +0800] "GET /class-wp-image.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:09 +0800] "GET /riz.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:09 +0800] "GET /packsin1.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:10 +0800] "GET /om.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:10 +0800] "GET /006.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:10 +0800] "GET /lib.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:10 +0800] "GET /xda.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:11 +0800] "GET /wolf.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:11 +0800] "GET /ww.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:11 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:11 +0800] "GET /pxw8hpvyfvvpojjxvnCdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:11 +0800] "GET /c6jpzOQvtPyeM9hdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:12 +0800] "GET /mfptbopeeg7v0sezxnbtgcgsCdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:12 +0800] "GET /image.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:12 +0800] "GET /ogifomnzqnlvwh5womfjirvaCdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:12 +0800] "GET /mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:13 +0800] "GET /r9pbhistk1lifhnjadpCdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:13 +0800] "GET /wp-admin/images/admin.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:13 +0800] "GET /roksad1.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:13 +0800] "GET /eFpU3yHnriNNLtvdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:14 +0800] "GET /oLEzRVqmJJPFSucdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:14 +0800] "GET /1aa.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:14 +0800] "GET /ibcqocdtu3eovdx2hwj7Cdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:14 +0800] "GET /12.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:14 +0800] "GET /n3yUmQ6Q9xwQ8ocdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.21.74 - - [10/Apr/2026:18:30:15 +0800] "GET /lmutxdvyp7u5yksqke8ozbjgCdefault.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:10 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:10 +0800] "GET /file6.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:11 +0800] "GET //sl.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:11 +0800] "GET /flox.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:11 +0800] "GET /mff.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:11 +0800] "GET /aq.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:12 +0800] "GET //filemanger2.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:12 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:12 +0800] "GET /wp-vn1.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:12 +0800] "GET /ewp.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:13 +0800] "GET /kikikoko.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:13 +0800] "GET //nwflm.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:13 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:13 +0800] "GET /xff.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:14 +0800] "GET /lupo.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:14 +0800] "GET /awa.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:14 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:14 +0800] "GET /popo.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:15 +0800] "GET /water.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:15 +0800] "GET /ggb.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:15 +0800] "GET /13.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:15 +0800] "GET /wert.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:16 +0800] "GET /11.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:16 +0800] "GET /p.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:16 +0800] "GET /oij98gy.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:16 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:17 +0800] "GET /turkshell.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:17 +0800] "GET /tea.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:17 +0800] "GET /seo.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:17 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:18 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:18 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:18 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:18 +0800] "GET /3.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:19 +0800] "GET /4.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:19 +0800] "GET /5.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:19 +0800] "GET /6.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:21 +0800] "GET /9.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:22 +0800] "GET /10.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:23 +0800] "GET /.mopj.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:23 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:23 +0800] "GET /nano.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:23 +0800] "GET /f35_S.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:24 +0800] "GET /2026w.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:24 +0800] "GET /111.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:24 +0800] "GET /wp1.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:24 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:25 +0800] "GET /byrgo.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:25 +0800] "GET //xwpg.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:25 +0800] "GET /ass.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:25 +0800] "GET //about.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:26 +0800] "GET /no18.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:26 +0800] "GET /fine.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:26 +0800] "GET /zample.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:26 +0800] "GET /hplfuns.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:27 +0800] "GET /xa.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:27 +0800] "GET //admin.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:27 +0800] "GET /inege.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:27 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:28 +0800] "GET /uuu.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:28 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:28 +0800] "GET /no1.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:28 +0800] "GET /w2025.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:29 +0800] "GET /fvvff.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:29 +0800] "GET /a2.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:29 +0800] "GET //edit.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:29 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:30 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:30 +0800] "GET /66.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:30 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:30 +0800] "GET /ol.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:31 +0800] "GET //f6.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:31 +0800] "GET //inputs.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:31 +0800] "GET /style.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:31 +0800] "GET //aa.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:32 +0800] "GET //av.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:32 +0800] "GET /wp-admin/css/bolt.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:32 +0800] "GET /bless4.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:32 +0800] "GET /wp-act.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:33 +0800] "GET /xqq.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:33 +0800] "GET /plss3.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:33 +0800] "GET /aaa.php?p= HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:33 +0800] "GET /classwithtostring.php?p= HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:34 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:34 +0800] "GET /tinyfilemanager.php?p= HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:34 +0800] "GET /wp-update.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:34 +0800] "GET /sbhu.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:35 +0800] "GET /wp-blog.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:35 +0800] "GET //wp-includes/js/jquery/ HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:35 +0800] "GET //wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:35 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:36 +0800] "GET //adminfuns.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:36 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:36 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:36 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:37 +0800] "GET //cgi-bin/index.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:37 +0800] "GET /fff.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:37 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:37 +0800] "GET /we.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:38 +0800] "GET /alpha.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:38 +0800] "GET /makeasmtp.php?p= HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:39 +0800] "GET /wp-michan.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:39 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:39 +0800] "GET //wp-includes/css/dist/ HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:39 +0800] "GET /BDKR28WP.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:40 +0800] "GET //wp-includes/l10n/ HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:40 +0800] "GET /wen.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:40 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:40 +0800] "GET /wp-admin/js/fi.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:41 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:41 +0800] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:41 +0800] "GET /av.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:41 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:42 +0800] "GET /fi.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:42 +0800] "GET //a1.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:42 +0800] "GET /update/f35.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:42 +0800] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 199 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:43 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:43 +0800] "GET //wp-includes/css/index.php?p= HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:43 +0800] "GET /wp-includes/SimplePie/ HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:44 +0800] "GET /prv8.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:44 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:44 +0800] "GET /dev.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:44 +0800] "GET /bal.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:45 +0800] "GET /in.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:45 +0800] "GET /gssdd.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:45 +0800] "GET /motu.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:45 +0800] "GET /bs1.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:46 +0800] "GET /bengi.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:46 +0800] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:46 +0800] "GET /axx.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:46 +0800] "GET /alfashell.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:47 +0800] "GET /gettest.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:47 +0800] "GET /acp.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:47 +0800] "GET /file48.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:47 +0800] "GET /g.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:48 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:48 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:48 +0800] "GET /ew.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:48 +0800] "GET /file21.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:49 +0800] "GET /class19.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:49 +0800] "GET /class20.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:49 +0800] "GET /file18.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:49 +0800] "GET /vee.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:50 +0800] "GET /cabs.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:50 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:50 +0800] "GET /x1da.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:50 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "-" 20.123.11.197 - - [10/Apr/2026:19:50:51 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "-" 147.182.255.133 - - [10/Apr/2026:22:19:07 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 147.182.255.133 - - [10/Apr/2026:22:19:07 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "http://test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 147.182.255.133 - - [10/Apr/2026:22:19:08 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 147.182.255.133 - - [10/Apr/2026:22:19:12 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "https://test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 158.69.227.165 - - [11/Apr/2026:00:28:13 +0800] "GET /.well-known/acme-challenge/5559f4bef1afabb455006134f8123a9dkey HTTP/1.0" 200 33 "-" "-" 164.68.120.90 - - [11/Apr/2026:03:34:24 +0800] "GET / HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 164.68.120.90 - - [11/Apr/2026:03:34:39 +0800] "GET / HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 20.203.232.30 - - [11/Apr/2026:06:53:21 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:21 +0800] "GET /file6.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:21 +0800] "GET //sl.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:21 +0800] "GET /flox.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:22 +0800] "GET /mff.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:22 +0800] "GET /aq.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:22 +0800] "GET //filemanger2.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:22 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:23 +0800] "GET /wp-vn1.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:23 +0800] "GET /ewp.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:23 +0800] "GET /kikikoko.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:23 +0800] "GET //nwflm.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:24 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:24 +0800] "GET /xff.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:24 +0800] "GET /lupo.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:24 +0800] "GET /awa.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:25 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:25 +0800] "GET /popo.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:25 +0800] "GET /water.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:25 +0800] "GET /ggb.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:25 +0800] "GET /13.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:26 +0800] "GET /wert.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:26 +0800] "GET /11.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:26 +0800] "GET /p.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:26 +0800] "GET /oij98gy.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:27 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:27 +0800] "GET /turkshell.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:27 +0800] "GET /tea.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:27 +0800] "GET /seo.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:28 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:28 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:28 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:28 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:29 +0800] "GET /3.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:29 +0800] "GET /4.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:29 +0800] "GET /5.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:29 +0800] "GET /6.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:30 +0800] "GET /9.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:30 +0800] "GET /10.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:30 +0800] "GET /.mopj.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:30 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:30 +0800] "GET /nano.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:31 +0800] "GET /f35_S.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:31 +0800] "GET /2026w.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:31 +0800] "GET /111.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:31 +0800] "GET /wp1.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:32 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:32 +0800] "GET /byrgo.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:32 +0800] "GET //xwpg.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:32 +0800] "GET /ass.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:33 +0800] "GET //about.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:33 +0800] "GET /no18.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:33 +0800] "GET /fine.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:33 +0800] "GET /zample.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:34 +0800] "GET /hplfuns.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:34 +0800] "GET /xa.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:34 +0800] "GET //admin.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:34 +0800] "GET /inege.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:34 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:35 +0800] "GET /uuu.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:35 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:35 +0800] "GET /no1.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:35 +0800] "GET /w2025.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:36 +0800] "GET /fvvff.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:36 +0800] "GET /a2.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:36 +0800] "GET //edit.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:36 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:37 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:37 +0800] "GET /66.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:37 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:37 +0800] "GET /ol.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:38 +0800] "GET //f6.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:38 +0800] "GET //inputs.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:38 +0800] "GET /style.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:38 +0800] "GET //aa.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:39 +0800] "GET //av.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:39 +0800] "GET /wp-admin/css/bolt.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:39 +0800] "GET /bless4.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:39 +0800] "GET /wp-act.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:41 +0800] "GET /xqq.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:41 +0800] "GET /plss3.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:41 +0800] "GET /aaa.php?p= HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:41 +0800] "GET /classwithtostring.php?p= HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:42 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:42 +0800] "GET /tinyfilemanager.php?p= HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:42 +0800] "GET /wp-update.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:42 +0800] "GET /sbhu.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:43 +0800] "GET /wp-blog.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:43 +0800] "GET //wp-includes/js/jquery/ HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:43 +0800] "GET //wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:43 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:44 +0800] "GET //adminfuns.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:44 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:44 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:44 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:44 +0800] "GET //cgi-bin/index.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:45 +0800] "GET /fff.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:45 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:45 +0800] "GET /we.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:45 +0800] "GET /alpha.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:46 +0800] "GET /makeasmtp.php?p= HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:46 +0800] "GET /wp-michan.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:46 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:47 +0800] "GET //wp-includes/css/dist/ HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:47 +0800] "GET /BDKR28WP.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:47 +0800] "GET //wp-includes/l10n/ HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:47 +0800] "GET /wen.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:48 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:48 +0800] "GET /wp-admin/js/fi.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:48 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:48 +0800] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:49 +0800] "GET /av.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:49 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:49 +0800] "GET /fi.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:49 +0800] "GET //a1.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:50 +0800] "GET /update/f35.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:50 +0800] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 199 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:50 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:51 +0800] "GET //wp-includes/css/index.php?p= HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:51 +0800] "GET /wp-includes/SimplePie/ HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:51 +0800] "GET /prv8.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:51 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:51 +0800] "GET /dev.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:52 +0800] "GET /bal.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:52 +0800] "GET /in.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:52 +0800] "GET /gssdd.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:52 +0800] "GET /motu.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:53 +0800] "GET /bs1.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:53 +0800] "GET /bengi.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:53 +0800] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:53 +0800] "GET /axx.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:54 +0800] "GET /alfashell.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:54 +0800] "GET /gettest.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:54 +0800] "GET /acp.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:54 +0800] "GET /file48.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:54 +0800] "GET /g.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:55 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:55 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:55 +0800] "GET /ew.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:55 +0800] "GET /file21.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:56 +0800] "GET /class19.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:56 +0800] "GET /class20.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:56 +0800] "GET /file18.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:56 +0800] "GET /vee.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:57 +0800] "GET /cabs.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:57 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:57 +0800] "GET /x1da.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:57 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "-" 20.203.232.30 - - [11/Apr/2026:06:53:58 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "-" 47.128.96.201 - - [11/Apr/2026:15:06:45 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "-" 47.128.96.175 - - [11/Apr/2026:15:10:45 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" 103.76.238.180 - - [11/Apr/2026:15:14:53 +0800] "GET / HTTP/1.1" 403 261 "https://thegreenscapecollective.com.au/" "Mozilla/5.0 (Linux; U; Android 15; SM-A366B Build/AP3A.240905.015.A2; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/140.0.7339.51 Mobile Safari/537.36 OPR/94.0.2254.78762" 49.196.253.98 - - [11/Apr/2026:15:14:56 +0800] "GET / HTTP/1.1" 403 261 "http://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (Linux; Android 8.0.0; SM-J330G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 EdgA/114.0.1823.74" 175.208.93.136 - - [11/Apr/2026:15:14:59 +0800] "GET / HTTP/1.1" 403 261 "https://www.yahoo.com.au/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36 EdgA/122.0.0.0" 103.76.236.243 - - [11/Apr/2026:15:15:04 +0800] "GET / HTTP/1.1" 403 261 "https://thegreenscapecollective.com.au/" "Mozilla/5.0 (Linux; Android 12; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36" 103.76.236.163 - - [11/Apr/2026:15:15:06 +0800] "GET / HTTP/1.1" 403 261 "http://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Mobile Safari/537.36 (compatible; Google-InspectionTool/1.0)" 103.76.237.120 - - [11/Apr/2026:15:15:07 +0800] "GET / HTTP/1.1" 403 261 "https://www.google.com.au/" "Mozilla/5.0 (Linux; Android 8; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36" 106.68.112.92 - - [11/Apr/2026:15:15:09 +0800] "GET / HTTP/1.1" 403 261 "https://www.yahoo.com.au/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/26.0 Chrome/122.0.0.0 Mobile Safari/537.36" 49.187.18.55 - - [11/Apr/2026:15:15:11 +0800] "GET / HTTP/1.1" 403 261 "http://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 EdgA/131.0.0.0" 103.76.236.118 - - [11/Apr/2026:15:15:18 +0800] "GET / HTTP/1.1" 403 261 "https://thegreenscapecollective.com.au/" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.118 Mobile Safari/537.36" 103.76.237.40 - - [11/Apr/2026:15:15:19 +0800] "GET / HTTP/1.1" 403 261 "http://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (Linux; Android 14; Pixel 6 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.119 Mobile Safari/537.36 OPR/81.2.4292.78581" 67.203.57.50 - - [11/Apr/2026:15:15:20 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 6 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.119 Mobile Safari/537.36 OPR/81.2.4292.78581" 49.193.70.204 - - [11/Apr/2026:15:15:27 +0800] "GET / HTTP/1.1" 403 261 "https://thegreenscapecollective.com.au/" "Mozilla/5.0 (Linux; Android 12; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36" 74.7.230.33 - - [11/Apr/2026:15:38:50 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 20.234.84.102 - - [11/Apr/2026:16:21:51 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:51 +0800] "GET /file6.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:52 +0800] "GET //sl.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:52 +0800] "GET /flox.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:52 +0800] "GET /mff.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:52 +0800] "GET /aq.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:53 +0800] "GET //filemanger2.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:53 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:53 +0800] "GET /wp-vn1.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:53 +0800] "GET /ewp.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:54 +0800] "GET /kikikoko.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:54 +0800] "GET //nwflm.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:54 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:54 +0800] "GET /xff.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:55 +0800] "GET /lupo.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:55 +0800] "GET /awa.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:55 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:56 +0800] "GET /popo.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:56 +0800] "GET /water.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:56 +0800] "GET /ggb.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:56 +0800] "GET /13.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:57 +0800] "GET /wert.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:57 +0800] "GET /11.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:57 +0800] "GET /p.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:57 +0800] "GET /oij98gy.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:58 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:58 +0800] "GET /turkshell.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:58 +0800] "GET /tea.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:58 +0800] "GET /seo.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:59 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:59 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:59 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:21:59 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:00 +0800] "GET /3.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:00 +0800] "GET /4.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:00 +0800] "GET /5.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:00 +0800] "GET /6.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:01 +0800] "GET /9.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:01 +0800] "GET /10.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:01 +0800] "GET /.mopj.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:01 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:02 +0800] "GET /nano.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:02 +0800] "GET /f35_S.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:02 +0800] "GET /2026w.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:02 +0800] "GET /111.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:03 +0800] "GET /wp1.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:03 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:03 +0800] "GET /byrgo.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:03 +0800] "GET //xwpg.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:04 +0800] "GET /ass.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:04 +0800] "GET //about.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:04 +0800] "GET /no18.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:04 +0800] "GET /fine.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:05 +0800] "GET /zample.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:05 +0800] "GET /hplfuns.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:05 +0800] "GET /xa.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:05 +0800] "GET //admin.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:06 +0800] "GET /inege.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:06 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:06 +0800] "GET /uuu.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:06 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:07 +0800] "GET /no1.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:07 +0800] "GET /w2025.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:07 +0800] "GET /fvvff.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:07 +0800] "GET /a2.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:08 +0800] "GET //edit.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:08 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:08 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:08 +0800] "GET /66.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:09 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:09 +0800] "GET /ol.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:09 +0800] "GET //f6.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:12 +0800] "GET //inputs.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:13 +0800] "GET /style.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:13 +0800] "GET //aa.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:13 +0800] "GET //av.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:13 +0800] "GET /wp-admin/css/bolt.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:14 +0800] "GET /bless4.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:14 +0800] "GET /wp-act.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:14 +0800] "GET /xqq.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:14 +0800] "GET /plss3.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:15 +0800] "GET /aaa.php?p= HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:15 +0800] "GET /classwithtostring.php?p= HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:15 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:15 +0800] "GET /tinyfilemanager.php?p= HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:16 +0800] "GET /wp-update.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:16 +0800] "GET /sbhu.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:16 +0800] "GET /wp-blog.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:16 +0800] "GET //wp-includes/js/jquery/ HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:17 +0800] "GET //wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:17 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:17 +0800] "GET //adminfuns.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:17 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:18 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:18 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:18 +0800] "GET //cgi-bin/index.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:18 +0800] "GET /fff.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:19 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:19 +0800] "GET /we.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:19 +0800] "GET /alpha.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:19 +0800] "GET /makeasmtp.php?p= HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:20 +0800] "GET /wp-michan.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:20 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:20 +0800] "GET //wp-includes/css/dist/ HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:21 +0800] "GET /BDKR28WP.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:21 +0800] "GET //wp-includes/l10n/ HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:21 +0800] "GET /wen.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:21 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:22 +0800] "GET /wp-admin/js/fi.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:22 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:22 +0800] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:22 +0800] "GET /av.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:23 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:23 +0800] "GET /fi.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:23 +0800] "GET //a1.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:23 +0800] "GET /update/f35.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:24 +0800] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 199 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:24 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:24 +0800] "GET //wp-includes/css/index.php?p= HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:25 +0800] "GET /wp-includes/SimplePie/ HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:25 +0800] "GET /prv8.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:25 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:25 +0800] "GET /dev.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:26 +0800] "GET /bal.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:26 +0800] "GET /in.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:26 +0800] "GET /gssdd.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:26 +0800] "GET /motu.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:27 +0800] "GET /bs1.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:27 +0800] "GET /bengi.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:27 +0800] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:27 +0800] "GET /axx.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:28 +0800] "GET /alfashell.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:28 +0800] "GET /gettest.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:28 +0800] "GET /acp.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:28 +0800] "GET /file48.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:29 +0800] "GET /g.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:29 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:29 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:29 +0800] "GET /ew.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:30 +0800] "GET /file21.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:30 +0800] "GET /class19.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:30 +0800] "GET /class20.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:30 +0800] "GET /file18.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:31 +0800] "GET /vee.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:31 +0800] "GET /cabs.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:31 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:31 +0800] "GET /x1da.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:32 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "-" 20.234.84.102 - - [11/Apr/2026:16:22:32 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "-" 74.7.227.33 - - [11/Apr/2026:17:10:57 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.241.150 - - [11/Apr/2026:17:10:58 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 138.246.253.24 - - [11/Apr/2026:18:56:33 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 158.69.227.165 - - [12/Apr/2026:00:26:18 +0800] "GET /.well-known/acme-challenge/975eba72e65eb953f69ff8018bdfb7cekey HTTP/1.0" 200 33 "-" "-" 209.38.77.153 - - [12/Apr/2026:02:04:50 +0800] "POST /wp-admin/admin-ajax.php HTTP/1.1" 403 261 "-" "Mozilla/5.0" 158.158.50.95 - - [12/Apr/2026:02:36:53 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:36:54 +0800] "GET /zc-942.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:36:54 +0800] "GET /4GrJSiwkF3A.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:36:54 +0800] "GET /SS72_kKKjT.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:36:54 +0800] "GET /wkogn.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:36:55 +0800] "GET /hwjtry0zd1fzeakcuzn8Cdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:36:56 +0800] "GET /cilus.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:36:56 +0800] "GET /oLEzRVqmJJPFSucdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:36:56 +0800] "GET /wwdgl.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:36:57 +0800] "GET /3akp.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:36:58 +0800] "GET /HLA-dd.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:36:59 +0800] "GET /BhqKs28Cw94.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:36:59 +0800] "GET /cdn3.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:36:59 +0800] "GET /3Cr1w6dfjTK.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:00 +0800] "GET /beerd.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:00 +0800] "GET /hhxc.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:00 +0800] "GET /161dfd072f.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:00 +0800] "GET /ws80.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:02 +0800] "GET /ylzed0twj8l9drdbchc1oocfCdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:02 +0800] "GET /RIP.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:02 +0800] "GET /no18.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:03 +0800] "GET /blqjs.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:03 +0800] "GET /sk25_1.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:03 +0800] "GET /fetch.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:03 +0800] "GET /eFpU3yHnriNNLtvdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:03 +0800] "GET /2nzyHnOkEg.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:04 +0800] "GET /oircv.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:04 +0800] "GET /blnux.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:04 +0800] "GET /n3yUmQ6Q9xwQ8ocdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:05 +0800] "GET /Spow_SRw.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:05 +0800] "GET /albrt.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:05 +0800] "GET /xxivicLhot.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:05 +0800] "GET /7logs.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:06 +0800] "GET /acc.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:06 +0800] "GET /wxeyc.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:06 +0800] "GET /xltt.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:06 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:07 +0800] "GET /fyflv.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:07 +0800] "GET /tymi.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:07 +0800] "GET /sde.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:07 +0800] "GET /wpb.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:08 +0800] "GET /Geforce.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:08 +0800] "GET /9EaklzMysJ.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:08 +0800] "GET /wpxl.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:09 +0800] "GET /s3FiyJ2WGCnF0p1default.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:09 +0800] "GET /bfil.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:09 +0800] "GET /lb.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:09 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:11 +0800] "GET /menu.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:11 +0800] "GET /p14rAeWytPdH5hZcscCFdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:11 +0800] "GET /iindv.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:12 +0800] "GET /maintura.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:12 +0800] "GET /iee52ruz0s81ndrdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:12 +0800] "GET /nvwf4svpvqohxdjtbjCdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:13 +0800] "GET /zc-220.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:13 +0800] "GET /r9pbhistk1lifhnjadpCdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:13 +0800] "GET /fone1.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:13 +0800] "GET /xxiviLDIot.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:14 +0800] "GET /hanyatersenyum.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:14 +0800] "GET /5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:14 +0800] "GET /upll22.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:14 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:15 +0800] "GET /byrgo.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:15 +0800] "GET /zc-243.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:15 +0800] "GET /pm90apbv3v5fvgkbguyiCdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:15 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:16 +0800] "GET /CDX1.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:16 +0800] "GET /gvg1bvpsgtot1rpklCdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:16 +0800] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:16 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:17 +0800] "GET /file61.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:17 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:17 +0800] "GET /tx79.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:18 +0800] "GET /CDX2.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:18 +0800] "GET /666.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:18 +0800] "GET /wtiiy.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:19 +0800] "GET /Sanskrit.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:19 +0800] "GET /motu.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:19 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:19 +0800] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:20 +0800] "GET /gifclass.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:20 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:20 +0800] "GET /jga.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:20 +0800] "GET /term.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:21 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:21 +0800] "GET /Ov-Simple1.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:21 +0800] "GET /dass.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:21 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:22 +0800] "GET /ta0ol.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:22 +0800] "GET /wp-png.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:22 +0800] "GET /tfm.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:22 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:22 +0800] "GET /kj.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:23 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:23 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:23 +0800] "GET /lib.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:24 +0800] "GET /bolt.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:24 +0800] "GET //file61.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:24 +0800] "GET /uuu.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:25 +0800] "GET /gptsh.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:25 +0800] "GET /mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:26 +0800] "GET /sid3.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:26 +0800] "GET /ogifomnzqnlvwh5womfjirvaCdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:27 +0800] "GET /Cap.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:27 +0800] "GET /lmutxdvyp7u5yksqke8ozbjgCdefault.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:27 +0800] "GET /torsa1.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:27 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:28 +0800] "GET /zoper1.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:28 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:28 +0800] "GET /ortasekerli1.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:29 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:30 +0800] "GET /wmore1.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:31 +0800] "GET /new3.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:31 +0800] "GET //nw.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:31 +0800] "GET /byypas.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:31 +0800] "GET /rithin.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:32 +0800] "GET /a4.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:32 +0800] "GET /jlex.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:32 +0800] "GET /xsas.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:32 +0800] "GET /wp/jp.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:33 +0800] "GET /8573.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:33 +0800] "GET /wp5.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:33 +0800] "GET /wp9.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:34 +0800] "GET /ws88.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:34 +0800] "GET //motu.php HTTP/1.1" 403 261 "-" "-" 158.158.50.95 - - [12/Apr/2026:02:37:34 +0800] "GET /ibcqocdtu3eovdx2hwj7Cdefault.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:06 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:07 +0800] "GET /footer.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:07 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:08 +0800] "GET /ccs.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:09 +0800] "GET /son1.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:09 +0800] "GET /wps.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:09 +0800] "GET /wmore1.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:09 +0800] "GET /tiny2.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:10 +0800] "GET /roksad1.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:10 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:10 +0800] "GET /ga.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:11 +0800] "GET /less.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:11 +0800] "GET /x3x.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:11 +0800] "GET /wp-includes/Ipv6.php HTTP/1.1" 403 199 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:12 +0800] "GET /state.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:12 +0800] "GET /xozx.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:12 +0800] "GET /1100.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:13 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:13 +0800] "GET /97.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:13 +0800] "GET /file-gertdxz.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:13 +0800] "GET /aboute.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:14 +0800] "GET /lv.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:14 +0800] "GET /config.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:14 +0800] "GET /tx79.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:14 +0800] "GET /9.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:15 +0800] "GET /ng.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:15 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:15 +0800] "GET /wswer1.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:15 +0800] "GET /saorix1.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:16 +0800] "GET /wgift1.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:16 +0800] "GET /img.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:16 +0800] "GET /new3.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:17 +0800] "GET /wp-turn.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:17 +0800] "GET /ayk.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:17 +0800] "GET /red.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:17 +0800] "GET /ss.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:18 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:18 +0800] "GET /gecko.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:18 +0800] "GET /wziar1.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:18 +0800] "GET /xs.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:19 +0800] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 403 199 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:19 +0800] "GET /pp.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:19 +0800] "GET /myy.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:20 +0800] "GET /tiny.php HTTP/1.1" 403 199 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:20 +0800] "GET /wdone1.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:20 +0800] "GET /xff.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:21 +0800] "GET /wsheet1.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:21 +0800] "GET /ggb.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:21 +0800] "GET /ava.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:22 +0800] "GET /awh.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:22 +0800] "GET /r2.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:22 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:22 +0800] "GET /db.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:23 +0800] "GET /class-wp-image.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:23 +0800] "GET /riz.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:23 +0800] "GET /packsin1.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:23 +0800] "GET /om.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:24 +0800] "GET /006.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:24 +0800] "GET /lib.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:24 +0800] "GET /xda.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:25 +0800] "GET /wolf.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:25 +0800] "GET /ww.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:25 +0800] "GET /wp-admin/images/admin.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:25 +0800] "GET /1aa.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:26 +0800] "GET /12.php HTTP/1.1" 403 261 "-" "-" 20.223.145.95 - - [12/Apr/2026:07:04:26 +0800] "GET /eFpU3yHnriNNLtvdefault.php?p= HTTP/1.1" 403 261 "-" "-" 89.222.112.8 - - [12/Apr/2026:10:01:41 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Kubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 161.118.249.52 - - [12/Apr/2026:15:03:03 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 161.118.249.52 - - [12/Apr/2026:15:03:04 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 161.118.249.52 - - [12/Apr/2026:15:03:04 +0800] "GET /wp-admin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:119.0) Gecko/20100101 Firefox/119.0" 143.110.240.70 - - [12/Apr/2026:17:31:06 +0800] "GET /wp-admin/css/ HTTP/1.1" 403 261 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 74.7.230.33 - - [12/Apr/2026:18:21:21 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.241.150 - - [12/Apr/2026:20:17:30 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.230.33 - - [12/Apr/2026:20:22:38 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 158.69.227.165 - - [13/Apr/2026:00:28:44 +0800] "GET /.well-known/acme-challenge/4f95ece4a67b16a074730b28ed374f74key HTTP/1.0" 200 33 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:11 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:11 +0800] "GET /file6.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:12 +0800] "GET //sl.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:12 +0800] "GET /flox.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:12 +0800] "GET /mff.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:12 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:13 +0800] "GET /8QXC9v.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:13 +0800] "GET //themes.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:13 +0800] "GET /panel.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:14 +0800] "GET /ewp.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:14 +0800] "GET /kikikoko.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:14 +0800] "GET //nwflm.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:15 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:15 +0800] "GET /xff.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:15 +0800] "GET /lupo.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:15 +0800] "GET /awa.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:15 +0800] "GET /popo.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:16 +0800] "GET /water.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:16 +0800] "GET /ggb.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:16 +0800] "GET /13.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:17 +0800] "GET /wert.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:17 +0800] "GET /11.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:17 +0800] "GET /p.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:18 +0800] "GET /oij98gy.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:18 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:18 +0800] "GET /turkshell.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:19 +0800] "GET /tea.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:19 +0800] "GET /seo.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:19 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:19 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:20 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:20 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:20 +0800] "GET /3.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:20 +0800] "GET /4.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:21 +0800] "GET /5.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:21 +0800] "GET /6.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:21 +0800] "GET /9.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:21 +0800] "GET /10.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:22 +0800] "GET /.mopj.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:22 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:22 +0800] "GET /nano.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:23 +0800] "GET /f35_S.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:23 +0800] "GET /2026w.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:23 +0800] "GET /111.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:23 +0800] "GET /wp1.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:24 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:24 +0800] "GET /byrgo.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:24 +0800] "GET //xwpg.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:24 +0800] "GET /ass.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:25 +0800] "GET //about.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:25 +0800] "GET /no18.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:25 +0800] "GET /fine.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:25 +0800] "GET /zample.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:25 +0800] "GET /hplfuns.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:26 +0800] "GET /xa.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:26 +0800] "GET //admin.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:26 +0800] "GET /inege.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:27 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:27 +0800] "GET /uuu.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:27 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:27 +0800] "GET /no1.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:28 +0800] "GET /w2025.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:28 +0800] "GET /fvvff.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:28 +0800] "GET /a2.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:28 +0800] "GET //edit.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:28 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:29 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:30 +0800] "GET /66.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:30 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:31 +0800] "GET /ol.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:31 +0800] "GET //f6.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:31 +0800] "GET //inputs.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:31 +0800] "GET /style.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:32 +0800] "GET //aa.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:32 +0800] "GET //av.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:32 +0800] "GET /wp-admin/css/bolt.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:32 +0800] "GET /bless4.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:33 +0800] "GET /wp-act.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:33 +0800] "GET /xqq.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:33 +0800] "GET /plss3.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:33 +0800] "GET /aaa.php?p= HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:34 +0800] "GET /classwithtostring.php?p= HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:34 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:34 +0800] "GET /tinyfilemanager.php?p= HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:34 +0800] "GET /wp-update.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:35 +0800] "GET /sbhu.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:35 +0800] "GET /wp-blog.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:35 +0800] "GET //wp-includes/js/jquery/ HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:35 +0800] "GET //wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:36 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:36 +0800] "GET //adminfuns.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:36 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:36 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:37 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:37 +0800] "GET //cgi-bin/index.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:37 +0800] "GET /fff.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:37 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:38 +0800] "GET /we.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:38 +0800] "GET /alpha.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:38 +0800] "GET /makeasmtp.php?p= HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:39 +0800] "GET /wp-michan.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:40 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:40 +0800] "GET //wp-includes/css/dist/ HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:40 +0800] "GET /BDKR28WP.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:41 +0800] "GET //wp-includes/l10n/ HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:41 +0800] "GET /wen.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:41 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:41 +0800] "GET /wp-admin/js/fi.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:41 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:42 +0800] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:42 +0800] "GET /av.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:42 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:43 +0800] "GET /fi.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:43 +0800] "GET //a1.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:43 +0800] "GET /update/f35.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:43 +0800] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 199 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:48 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:48 +0800] "GET //wp-includes/css/index.php?p= HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:48 +0800] "GET /wp-includes/SimplePie/ HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:49 +0800] "GET /prv8.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:49 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:49 +0800] "GET /dev.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:49 +0800] "GET /bal.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:50 +0800] "GET /in.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:50 +0800] "GET /gssdd.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:50 +0800] "GET /motu.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:51 +0800] "GET /bs1.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:51 +0800] "GET /bengi.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:51 +0800] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:51 +0800] "GET /axx.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:51 +0800] "GET /alfashell.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:52 +0800] "GET /gettest.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:52 +0800] "GET /acp.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:52 +0800] "GET /file48.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:53 +0800] "GET /g.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:53 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:53 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:53 +0800] "GET /ew.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:54 +0800] "GET /file21.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:54 +0800] "GET /class19.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:54 +0800] "GET /class20.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:54 +0800] "GET /file18.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:55 +0800] "GET /vee.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:55 +0800] "GET /cabs.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:55 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:55 +0800] "GET /x1da.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:56 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "-" 20.250.9.235 - - [13/Apr/2026:05:46:56 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "-" 20.104.245.70 - - [13/Apr/2026:06:12:58 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.104.245.70 - - [13/Apr/2026:06:12:58 +0800] "GET /kma.php HTTP/1.1" 403 261 "-" "-" 20.104.245.70 - - [13/Apr/2026:06:12:58 +0800] "GET /wpls.php HTTP/1.1" 403 261 "-" "-" 20.104.245.70 - - [13/Apr/2026:06:12:58 +0800] "GET /i6z19N.php HTTP/1.1" 403 261 "-" "-" 20.104.245.70 - - [13/Apr/2026:06:12:59 +0800] "GET /ssh3ll.php HTTP/1.1" 403 261 "-" "-" 20.104.245.70 - - [13/Apr/2026:06:12:59 +0800] "GET /new4.php HTTP/1.1" 403 261 "-" "-" 5.189.135.191 - - [13/Apr/2026:06:33:40 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" 158.158.73.245 - - [13/Apr/2026:09:03:43 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 199 "-" "-" 158.158.73.245 - - [13/Apr/2026:09:03:44 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 199 "-" "-" 158.158.73.245 - - [13/Apr/2026:09:03:45 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 199 "-" "-" 158.158.73.245 - - [13/Apr/2026:09:03:46 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 199 "-" "-" 20.151.248.149 - - [13/Apr/2026:10:10:54 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.151.248.149 - - [13/Apr/2026:10:10:54 +0800] "GET /ssh3ll.php HTTP/1.1" 403 261 "-" "-" 20.151.248.149 - - [13/Apr/2026:10:10:54 +0800] "GET /kma.php HTTP/1.1" 403 261 "-" "-" 20.151.248.149 - - [13/Apr/2026:10:10:54 +0800] "GET /mjq.php HTTP/1.1" 403 261 "-" "-" 20.151.248.149 - - [13/Apr/2026:10:10:55 +0800] "GET /wpls.php HTTP/1.1" 403 261 "-" "-" 20.151.248.149 - - [13/Apr/2026:10:10:55 +0800] "GET /i6z19N.php HTTP/1.1" 403 261 "-" "-" 20.151.248.149 - - [13/Apr/2026:10:10:55 +0800] "GET /new4.php HTTP/1.1" 403 261 "-" "-" 20.104.245.70 - - [13/Apr/2026:10:11:24 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.104.245.70 - - [13/Apr/2026:10:11:24 +0800] "GET /ssh3ll.php HTTP/1.1" 403 261 "-" "-" 20.104.245.70 - - [13/Apr/2026:10:11:24 +0800] "GET /kma.php HTTP/1.1" 403 261 "-" "-" 20.104.245.70 - - [13/Apr/2026:10:11:25 +0800] "GET /mjq.php HTTP/1.1" 403 261 "-" "-" 20.104.245.70 - - [13/Apr/2026:10:11:25 +0800] "GET /wpls.php HTTP/1.1" 403 261 "-" "-" 20.104.245.70 - - [13/Apr/2026:10:11:25 +0800] "GET /i6z19N.php HTTP/1.1" 403 261 "-" "-" 20.104.245.70 - - [13/Apr/2026:10:11:25 +0800] "GET /new4.php HTTP/1.1" 403 261 "-" "-" 20.104.245.70 - - [13/Apr/2026:10:23:56 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.104.245.70 - - [13/Apr/2026:10:23:56 +0800] "GET /ssh3ll.php HTTP/1.1" 403 261 "-" "-" 20.104.245.70 - - [13/Apr/2026:10:23:56 +0800] "GET /kma.php HTTP/1.1" 403 261 "-" "-" 20.104.245.70 - - [13/Apr/2026:10:23:56 +0800] "GET /mjq.php HTTP/1.1" 403 261 "-" "-" 20.104.245.70 - - [13/Apr/2026:10:23:57 +0800] "GET /wpls.php HTTP/1.1" 403 261 "-" "-" 20.104.245.70 - - [13/Apr/2026:10:23:57 +0800] "GET /i6z19N.php HTTP/1.1" 403 261 "-" "-" 20.104.245.70 - - [13/Apr/2026:10:23:57 +0800] "GET /new4.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:03 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:03 +0800] "GET /tymi.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:04 +0800] "GET /4GrJSiwkF3A.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:04 +0800] "GET /SS72_kKKjT.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:05 +0800] "GET /wkogn.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:05 +0800] "GET /hwjtry0zd1fzeakcuzn8Cdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:06 +0800] "GET /cilus.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:06 +0800] "GET /oLEzRVqmJJPFSucdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:06 +0800] "GET /wwdgl.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:06 +0800] "GET /3akp.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:07 +0800] "GET /HLA-dd.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:07 +0800] "GET /BhqKs28Cw94.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:07 +0800] "GET /cdn3.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:07 +0800] "GET /3Cr1w6dfjTK.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:08 +0800] "GET /beerd.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:08 +0800] "GET /hhxc.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:09 +0800] "GET /161dfd072f.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:09 +0800] "GET /ws80.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:09 +0800] "GET /ylzed0twj8l9drdbchc1oocfCdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:09 +0800] "GET /RIP.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:10 +0800] "GET /no18.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:10 +0800] "GET /blqjs.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:10 +0800] "GET /sk25_1.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:11 +0800] "GET /fetch.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:11 +0800] "GET /eFpU3yHnriNNLtvdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:12 +0800] "GET /2nzyHnOkEg.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:12 +0800] "GET /oircv.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:12 +0800] "GET /blnux.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:13 +0800] "GET /n3yUmQ6Q9xwQ8ocdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:13 +0800] "GET /Spow_SRw.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:13 +0800] "GET /albrt.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:14 +0800] "GET /xxivicLhot.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:14 +0800] "GET /7logs.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:14 +0800] "GET /acc.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:15 +0800] "GET /wxeyc.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:15 +0800] "GET /xltt.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:15 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:15 +0800] "GET /fyflv.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:16 +0800] "GET /zc-942.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:16 +0800] "GET /sde.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:16 +0800] "GET /wpb.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:16 +0800] "GET /Geforce.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:17 +0800] "GET /9EaklzMysJ.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:17 +0800] "GET /wpxl.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:18 +0800] "GET /s3FiyJ2WGCnF0p1default.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:21 +0800] "GET /bfil.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:21 +0800] "GET /lb.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:21 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:22 +0800] "GET /menu.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:22 +0800] "GET /p14rAeWytPdH5hZcscCFdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:22 +0800] "GET /iindv.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:23 +0800] "GET /maintura.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:23 +0800] "GET /iee52ruz0s81ndrdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:23 +0800] "GET /nvwf4svpvqohxdjtbjCdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:23 +0800] "GET /zc-220.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:24 +0800] "GET /r9pbhistk1lifhnjadpCdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:24 +0800] "GET /fone1.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:25 +0800] "GET /xxiviLDIot.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:26 +0800] "GET /hanyatersenyum.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:26 +0800] "GET /5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:26 +0800] "GET /upll22.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:26 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:27 +0800] "GET /byrgo.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:27 +0800] "GET /zc-243.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:27 +0800] "GET /pm90apbv3v5fvgkbguyiCdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:27 +0800] "GET /CDX1.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:28 +0800] "GET /gvg1bvpsgtot1rpklCdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:28 +0800] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:28 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:28 +0800] "GET /file61.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:29 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:29 +0800] "GET /tx79.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:29 +0800] "GET /CDX2.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:30 +0800] "GET /666.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:30 +0800] "GET /wtiiy.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:30 +0800] "GET /Sanskrit.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:30 +0800] "GET /motu.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:31 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:31 +0800] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:31 +0800] "GET /gifclass.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:31 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:32 +0800] "GET /jga.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:32 +0800] "GET /term.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:32 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:33 +0800] "GET /Ov-Simple1.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:33 +0800] "GET /dass.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:33 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:33 +0800] "GET /ta0ol.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:34 +0800] "GET /wp-png.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:34 +0800] "GET /tfm.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:34 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:34 +0800] "GET /kj.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:35 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:35 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:35 +0800] "GET /lib.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:36 +0800] "GET /bolt.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:36 +0800] "GET //file61.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:36 +0800] "GET /uuu.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:36 +0800] "GET /gptsh.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:37 +0800] "GET /mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:37 +0800] "GET /sid3.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:57 +0800] "GET /Cap.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:57 +0800] "GET /lmutxdvyp7u5yksqke8ozbjgCdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:58 +0800] "GET /torsa1.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:58 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:58 +0800] "GET /zoper1.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:59 +0800] "GET /ortasekerli1.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:59 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:59 +0800] "GET /wmore1.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:20:59 +0800] "GET /new3.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:21:00 +0800] "GET //nw.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:21:00 +0800] "GET /byypas.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:21:00 +0800] "GET /rithin.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:21:00 +0800] "GET /a4.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:21:01 +0800] "GET /jlex.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:21:01 +0800] "GET /xsas.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:21:01 +0800] "GET /wp/jp.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:21:02 +0800] "GET /8573.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:21:02 +0800] "GET /wp5.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:21:02 +0800] "GET /wp9.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:21:02 +0800] "GET /ws88.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:21:03 +0800] "GET //motu.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:21:03 +0800] "GET /ibcqocdtu3eovdx2hwj7Cdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:22:53 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:22:53 +0800] "GET /tymi.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:22:53 +0800] "GET /4GrJSiwkF3A.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:22:53 +0800] "GET /SS72_kKKjT.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:22:54 +0800] "GET /wkogn.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:22:54 +0800] "GET /hwjtry0zd1fzeakcuzn8Cdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:22:54 +0800] "GET /cilus.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:22:54 +0800] "GET /oLEzRVqmJJPFSucdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:22:55 +0800] "GET /wwdgl.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:22:55 +0800] "GET /3akp.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:22:55 +0800] "GET /HLA-dd.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:22:56 +0800] "GET /BhqKs28Cw94.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:22:57 +0800] "GET /cdn3.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:22:57 +0800] "GET /3Cr1w6dfjTK.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:22:57 +0800] "GET /beerd.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:22:57 +0800] "GET /hhxc.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:22:57 +0800] "GET /161dfd072f.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:22:58 +0800] "GET /ws80.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:22:58 +0800] "GET /ylzed0twj8l9drdbchc1oocfCdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:22:58 +0800] "GET /RIP.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:22:58 +0800] "GET /no18.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:22:59 +0800] "GET /blqjs.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:22:59 +0800] "GET /sk25_1.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:22:59 +0800] "GET /fetch.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:00 +0800] "GET /eFpU3yHnriNNLtvdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:00 +0800] "GET /2nzyHnOkEg.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:00 +0800] "GET /oircv.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:00 +0800] "GET /blnux.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:01 +0800] "GET /n3yUmQ6Q9xwQ8ocdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:01 +0800] "GET /Spow_SRw.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:02 +0800] "GET /albrt.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:03 +0800] "GET /xxivicLhot.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:03 +0800] "GET /7logs.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:03 +0800] "GET /acc.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:04 +0800] "GET /wxeyc.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:04 +0800] "GET /xltt.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:04 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:04 +0800] "GET /fyflv.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:05 +0800] "GET /zc-942.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:05 +0800] "GET /sde.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:06 +0800] "GET /wpb.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:06 +0800] "GET /Geforce.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:06 +0800] "GET /9EaklzMysJ.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:06 +0800] "GET /wpxl.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:07 +0800] "GET /s3FiyJ2WGCnF0p1default.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:07 +0800] "GET /bfil.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:07 +0800] "GET /lb.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:07 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:08 +0800] "GET /menu.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:08 +0800] "GET /p14rAeWytPdH5hZcscCFdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:08 +0800] "GET /iindv.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:08 +0800] "GET /maintura.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:09 +0800] "GET /iee52ruz0s81ndrdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:09 +0800] "GET /nvwf4svpvqohxdjtbjCdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:09 +0800] "GET /zc-220.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:10 +0800] "GET /r9pbhistk1lifhnjadpCdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:11 +0800] "GET /fone1.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:11 +0800] "GET /xxiviLDIot.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:11 +0800] "GET /hanyatersenyum.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:11 +0800] "GET /5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:12 +0800] "GET /upll22.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:12 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:12 +0800] "GET /byrgo.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:12 +0800] "GET /zc-243.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:13 +0800] "GET /pm90apbv3v5fvgkbguyiCdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:13 +0800] "GET /CDX1.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:13 +0800] "GET /gvg1bvpsgtot1rpklCdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:13 +0800] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:14 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:14 +0800] "GET /file61.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:14 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:15 +0800] "GET /tx79.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:15 +0800] "GET /CDX2.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:15 +0800] "GET /666.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:16 +0800] "GET /wtiiy.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:16 +0800] "GET /Sanskrit.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:16 +0800] "GET /motu.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:16 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:17 +0800] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:17 +0800] "GET /gifclass.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:17 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:18 +0800] "GET /jga.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:18 +0800] "GET /term.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:18 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:19 +0800] "GET /Ov-Simple1.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:20 +0800] "GET /dass.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:20 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:20 +0800] "GET /ta0ol.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:21 +0800] "GET /wp-png.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:21 +0800] "GET /tfm.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:21 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:21 +0800] "GET /kj.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:22 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:22 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:22 +0800] "GET /lib.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:22 +0800] "GET /bolt.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:23 +0800] "GET //file61.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:23 +0800] "GET /uuu.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:23 +0800] "GET /gptsh.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:23 +0800] "GET /mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:24 +0800] "GET /sid3.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:27 +0800] "GET /ogifomnzqnlvwh5womfjirvaCdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:28 +0800] "GET /Cap.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:28 +0800] "GET /lmutxdvyp7u5yksqke8ozbjgCdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:28 +0800] "GET /torsa1.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:28 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:29 +0800] "GET /zoper1.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:29 +0800] "GET /ortasekerli1.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:29 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:29 +0800] "GET /wmore1.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:30 +0800] "GET /new3.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:30 +0800] "GET //nw.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:30 +0800] "GET /byypas.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:30 +0800] "GET /rithin.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:31 +0800] "GET /a4.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:31 +0800] "GET /jlex.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:31 +0800] "GET /xsas.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:31 +0800] "GET /wp/jp.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:32 +0800] "GET /8573.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:32 +0800] "GET /wp5.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:33 +0800] "GET /wp9.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:34 +0800] "GET /ws88.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:34 +0800] "GET //motu.php HTTP/1.1" 403 261 "-" "-" 51.103.236.112 - - [13/Apr/2026:16:23:34 +0800] "GET /ibcqocdtu3eovdx2hwj7Cdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:23 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:23 +0800] "GET /tymi.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:24 +0800] "GET /4GrJSiwkF3A.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:24 +0800] "GET /SS72_kKKjT.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:24 +0800] "GET /wkogn.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:24 +0800] "GET /hwjtry0zd1fzeakcuzn8Cdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:25 +0800] "GET /cilus.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:25 +0800] "GET /oLEzRVqmJJPFSucdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:25 +0800] "GET /wwdgl.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:25 +0800] "GET /3akp.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:26 +0800] "GET /HLA-dd.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:26 +0800] "GET /BhqKs28Cw94.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:26 +0800] "GET /cdn3.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:27 +0800] "GET /3Cr1w6dfjTK.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:27 +0800] "GET /beerd.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:28 +0800] "GET /hhxc.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:28 +0800] "GET /161dfd072f.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:28 +0800] "GET /ws80.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:29 +0800] "GET /ylzed0twj8l9drdbchc1oocfCdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:29 +0800] "GET /RIP.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:29 +0800] "GET /no18.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:30 +0800] "GET /blqjs.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:30 +0800] "GET /sk25_1.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:31 +0800] "GET /fetch.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:31 +0800] "GET /eFpU3yHnriNNLtvdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:31 +0800] "GET /2nzyHnOkEg.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:31 +0800] "GET /oircv.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:32 +0800] "GET /blnux.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:32 +0800] "GET /n3yUmQ6Q9xwQ8ocdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:32 +0800] "GET /Spow_SRw.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:33 +0800] "GET /albrt.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:33 +0800] "GET /xxivicLhot.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:34 +0800] "GET /7logs.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:34 +0800] "GET /acc.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:34 +0800] "GET /wxeyc.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:35 +0800] "GET /xltt.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:35 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:35 +0800] "GET /fyflv.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:35 +0800] "GET /zc-942.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:36 +0800] "GET /sde.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:36 +0800] "GET /wpb.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:36 +0800] "GET /Geforce.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:36 +0800] "GET /9EaklzMysJ.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:37 +0800] "GET /wpxl.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:37 +0800] "GET /s3FiyJ2WGCnF0p1default.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:37 +0800] "GET /bfil.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:38 +0800] "GET /lb.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:38 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:38 +0800] "GET /menu.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:39 +0800] "GET /p14rAeWytPdH5hZcscCFdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:39 +0800] "GET /iindv.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:40 +0800] "GET /maintura.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:40 +0800] "GET /iee52ruz0s81ndrdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:42 +0800] "GET /nvwf4svpvqohxdjtbjCdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:42 +0800] "GET /zc-220.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:44 +0800] "GET /r9pbhistk1lifhnjadpCdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:44 +0800] "GET /fone1.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:44 +0800] "GET /xxiviLDIot.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:44 +0800] "GET /hanyatersenyum.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:45 +0800] "GET /5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:45 +0800] "GET /upll22.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:45 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:46 +0800] "GET /byrgo.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:46 +0800] "GET /zc-243.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:46 +0800] "GET /pm90apbv3v5fvgkbguyiCdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:46 +0800] "GET /CDX1.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:47 +0800] "GET /gvg1bvpsgtot1rpklCdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:47 +0800] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:48 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:48 +0800] "GET /file61.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:48 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:49 +0800] "GET /tx79.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:49 +0800] "GET /CDX2.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:49 +0800] "GET /666.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:50 +0800] "GET /wtiiy.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:50 +0800] "GET /Sanskrit.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:50 +0800] "GET /motu.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:50 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:51 +0800] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:51 +0800] "GET /gifclass.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:51 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:51 +0800] "GET /jga.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:52 +0800] "GET /term.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:53 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:53 +0800] "GET /Ov-Simple1.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:54 +0800] "GET /dass.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:54 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:55 +0800] "GET /ta0ol.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:55 +0800] "GET /wp-png.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:55 +0800] "GET /tfm.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:56 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:56 +0800] "GET /kj.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:56 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:56 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:57 +0800] "GET /lib.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:57 +0800] "GET /bolt.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:57 +0800] "GET //file61.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:57 +0800] "GET /uuu.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:58 +0800] "GET /gptsh.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:58 +0800] "GET /mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:25:59 +0800] "GET /sid3.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:06 +0800] "GET /ogifomnzqnlvwh5womfjirvaCdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:06 +0800] "GET /Cap.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:06 +0800] "GET /lmutxdvyp7u5yksqke8ozbjgCdefault.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:07 +0800] "GET /torsa1.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:07 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:07 +0800] "GET /zoper1.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:08 +0800] "GET /ortasekerli1.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:10 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:10 +0800] "GET /wmore1.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:11 +0800] "GET /new3.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:11 +0800] "GET //nw.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:11 +0800] "GET /byypas.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:12 +0800] "GET /rithin.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:12 +0800] "GET /a4.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:12 +0800] "GET /jlex.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:12 +0800] "GET /xsas.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:13 +0800] "GET /wp/jp.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:13 +0800] "GET /8573.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:13 +0800] "GET /wp5.php HTTP/1.1" 403 261 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:13 +0800] "GET /wp9.php HTTP/1.1" 403 199 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:15 +0800] "GET /wp9.php HTTP/1.1" 403 199 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:17 +0800] "GET /wp9.php HTTP/1.1" 403 199 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:19 +0800] "GET /wp9.php HTTP/1.1" 403 199 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:21 +0800] "GET /ws88.php HTTP/1.1" 403 199 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:22 +0800] "GET /ws88.php HTTP/1.1" 403 199 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:24 +0800] "GET /ws88.php HTTP/1.1" 403 199 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:25 +0800] "GET /ws88.php HTTP/1.1" 403 199 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:27 +0800] "GET //motu.php HTTP/1.1" 403 199 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:31 +0800] "GET //motu.php HTTP/1.1" 403 199 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:33 +0800] "GET //motu.php HTTP/1.1" 403 199 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:35 +0800] "GET //motu.php HTTP/1.1" 403 199 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:37 +0800] "GET /ibcqocdtu3eovdx2hwj7Cdefault.php HTTP/1.1" 403 199 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:39 +0800] "GET /ibcqocdtu3eovdx2hwj7Cdefault.php HTTP/1.1" 403 199 "-" "-" 20.100.201.121 - - [13/Apr/2026:16:26:47 +0800] "GET /ibcqocdtu3eovdx2hwj7Cdefault.php HTTP/1.1" 403 199 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:42 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:42 +0800] "GET /tymi.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:43 +0800] "GET /4GrJSiwkF3A.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:43 +0800] "GET /SS72_kKKjT.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:43 +0800] "GET /wkogn.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:44 +0800] "GET /hwjtry0zd1fzeakcuzn8Cdefault.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:44 +0800] "GET /cilus.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:44 +0800] "GET /oLEzRVqmJJPFSucdefault.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:44 +0800] "GET /wwdgl.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:45 +0800] "GET /3akp.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:45 +0800] "GET /HLA-dd.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:45 +0800] "GET /BhqKs28Cw94.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:46 +0800] "GET /cdn3.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:46 +0800] "GET /3Cr1w6dfjTK.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:46 +0800] "GET /beerd.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:46 +0800] "GET /hhxc.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:47 +0800] "GET /161dfd072f.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:48 +0800] "GET /ws80.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:48 +0800] "GET /ylzed0twj8l9drdbchc1oocfCdefault.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:49 +0800] "GET /RIP.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:50 +0800] "GET /no18.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:50 +0800] "GET /blqjs.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:50 +0800] "GET /sk25_1.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:50 +0800] "GET /fetch.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:51 +0800] "GET /eFpU3yHnriNNLtvdefault.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:51 +0800] "GET /2nzyHnOkEg.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:51 +0800] "GET /oircv.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:52 +0800] "GET /blnux.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:52 +0800] "GET /n3yUmQ6Q9xwQ8ocdefault.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:52 +0800] "GET /Spow_SRw.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:53 +0800] "GET /albrt.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:53 +0800] "GET /xxivicLhot.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:53 +0800] "GET /7logs.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:54 +0800] "GET /acc.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:54 +0800] "GET /wxeyc.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:54 +0800] "GET /xltt.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:54 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:55 +0800] "GET /fyflv.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:55 +0800] "GET /zc-942.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:56 +0800] "GET /sde.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:56 +0800] "GET /wpb.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:56 +0800] "GET /Geforce.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:57 +0800] "GET /9EaklzMysJ.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:57 +0800] "GET /wpxl.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:58 +0800] "GET /s3FiyJ2WGCnF0p1default.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:58 +0800] "GET /bfil.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:59 +0800] "GET /lb.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:59 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:59 +0800] "GET /menu.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:35:59 +0800] "GET /p14rAeWytPdH5hZcscCFdefault.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:00 +0800] "GET /iindv.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:00 +0800] "GET /maintura.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:00 +0800] "GET /iee52ruz0s81ndrdefault.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:00 +0800] "GET /nvwf4svpvqohxdjtbjCdefault.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:01 +0800] "GET /zc-220.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:01 +0800] "GET /r9pbhistk1lifhnjadpCdefault.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:02 +0800] "GET /fone1.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:02 +0800] "GET /xxiviLDIot.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:02 +0800] "GET /hanyatersenyum.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:03 +0800] "GET /5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:03 +0800] "GET /upll22.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:04 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:04 +0800] "GET /byrgo.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:04 +0800] "GET /zc-243.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:04 +0800] "GET /pm90apbv3v5fvgkbguyiCdefault.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:05 +0800] "GET /CDX1.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:05 +0800] "GET /gvg1bvpsgtot1rpklCdefault.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:05 +0800] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:05 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:06 +0800] "GET /file61.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:06 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:06 +0800] "GET /tx79.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:06 +0800] "GET /CDX2.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:07 +0800] "GET /666.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:07 +0800] "GET /wtiiy.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:07 +0800] "GET /Sanskrit.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:08 +0800] "GET /motu.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:08 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:08 +0800] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:08 +0800] "GET /gifclass.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:09 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:09 +0800] "GET /jga.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:09 +0800] "GET /term.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:09 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:10 +0800] "GET /Ov-Simple1.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:10 +0800] "GET /dass.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:10 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:10 +0800] "GET /ta0ol.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:11 +0800] "GET /wp-png.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:11 +0800] "GET /tfm.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:11 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:12 +0800] "GET /kj.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:12 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:12 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:13 +0800] "GET /lib.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:13 +0800] "GET /bolt.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:13 +0800] "GET //file61.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:13 +0800] "GET /uuu.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:14 +0800] "GET /gptsh.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:14 +0800] "GET /mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:14 +0800] "GET /sid3.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:16 +0800] "GET /ogifomnzqnlvwh5womfjirvaCdefault.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:16 +0800] "GET /Cap.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:18 +0800] "GET /lmutxdvyp7u5yksqke8ozbjgCdefault.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:18 +0800] "GET /torsa1.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:18 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:18 +0800] "GET /zoper1.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:19 +0800] "GET /ortasekerli1.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:19 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:19 +0800] "GET /wmore1.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:19 +0800] "GET /new3.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:20 +0800] "GET //nw.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:20 +0800] "GET /byypas.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:20 +0800] "GET /rithin.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:20 +0800] "GET /a4.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:21 +0800] "GET /jlex.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:21 +0800] "GET /xsas.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:21 +0800] "GET /wp/jp.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:22 +0800] "GET /8573.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:22 +0800] "GET /wp5.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:22 +0800] "GET /wp9.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:22 +0800] "GET /ws88.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:23 +0800] "GET //motu.php HTTP/1.1" 403 261 "-" "-" 74.248.132.51 - - [13/Apr/2026:16:36:23 +0800] "GET /ibcqocdtu3eovdx2hwj7Cdefault.php HTTP/1.1" 403 261 "-" "-" 79.127.171.213 - - [13/Apr/2026:23:53:42 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:104.0) Gecko/20100101 Firefox/104.0" 158.69.227.165 - - [14/Apr/2026:00:26:32 +0800] "GET /.well-known/acme-challenge/64730077abc193177b27caee30e0b80ckey HTTP/1.0" 200 33 "-" "-" 20.89.234.204 - - [14/Apr/2026:04:04:08 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:08 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:09 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:09 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:09 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:09 +0800] "GET /wp-includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:09 +0800] "GET /wp-content/plugins/beteng83/ws78.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:09 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:09 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:09 +0800] "GET /autoload_classmap/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:10 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:10 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:10 +0800] "GET /ws77.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:10 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:10 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:11 +0800] "GET /ws55.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:11 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:11 +0800] "GET /install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:11 +0800] "GET /wp-content/themes/theme/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:11 +0800] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:11 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:11 +0800] "GET /term.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:12 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:12 +0800] "GET /wp-content/plugins/beteng84/ws79.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:12 +0800] "GET /666.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:12 +0800] "GET /ah25.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:12 +0800] "GET /bolt.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:12 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:12 +0800] "GET /ws79.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:12 +0800] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:13 +0800] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:13 +0800] "GET /.well-known/pki-validation/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:13 +0800] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:13 +0800] "GET /autoload_classmap/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:13 +0800] "GET /wp-content/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:13 +0800] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:14 +0800] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:14 +0800] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:15 +0800] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:15 +0800] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:15 +0800] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:16 +0800] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:16 +0800] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:17 +0800] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.234.204 - - [14/Apr/2026:04:04:17 +0800] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 216.73.216.97 - - [14/Apr/2026:04:54:09 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "" 216.73.216.97 - - [14/Apr/2026:05:14:00 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.97 - - [14/Apr/2026:05:14:01 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "" 216.73.216.97 - - [14/Apr/2026:05:14:01 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 44.209.43.227 - - [14/Apr/2026:07:11:58 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/77.0.3865.120 Safari/537.36" 178.128.105.125 - - [14/Apr/2026:09:15:40 +0800] "GET / HTTP/1.1" 403 261 "-" "WP-Safe-Scanner/2.0" 56.124.117.123 - - [14/Apr/2026:14:36:02 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:03 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:03 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:04 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:04 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:05 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:06 +0800] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:07 +0800] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:09 +0800] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:10 +0800] "GET /.env.staging HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:12 +0800] "GET /.env.development HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:13 +0800] "GET /.env.test HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:15 +0800] "GET /.env.remote HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:16 +0800] "GET /.env.bak HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:18 +0800] "GET /.env.backup HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:19 +0800] "GET /.env.save HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:20 +0800] "GET /.env.old HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:22 +0800] "GET /.env.sample HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:23 +0800] "GET /.env.example HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:25 +0800] "GET /.env.dev HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:26 +0800] "GET /.env.prod HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:28 +0800] "GET /.env.stage HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:29 +0800] "GET /.env.ci HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:31 +0800] "GET /.env.docker HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:32 +0800] "GET /.env.live HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:34 +0800] "GET /.env.preprod HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:35 +0800] "GET /.env.uat HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:37 +0800] "GET /.env.dist HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:38 +0800] "GET /.env.swp HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:40 +0800] "GET /.env~ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:41 +0800] "GET /app/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:43 +0800] "GET /apps/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:44 +0800] "GET /api/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:45 +0800] "GET /web/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:47 +0800] "GET /site/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:48 +0800] "GET /public/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.117.123 - - [14/Apr/2026:14:36:50 +0800] "GET /admin/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 65.87.7.61 - - [14/Apr/2026:14:58:36 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 51.103.118.101 - - [14/Apr/2026:18:51:02 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:02 +0800] "GET /flower.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:02 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:03 +0800] "GET /doc.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:03 +0800] "GET /mifta.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:03 +0800] "GET /Geforce.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:03 +0800] "GET /packsin1.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:04 +0800] "GET /xs.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:04 +0800] "GET /son1.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:04 +0800] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 403 199 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:05 +0800] "GET /aboute.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:05 +0800] "GET /pp.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:06 +0800] "GET /ng.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:06 +0800] "GET /tiny2.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:06 +0800] "GET /state.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:06 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:07 +0800] "GET /wps.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:07 +0800] "GET /ayk.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:07 +0800] "GET /wgift1.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:07 +0800] "GET /ss.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:08 +0800] "GET /tx79.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:08 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:08 +0800] "GET /wp-admin/images/admin.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:09 +0800] "GET /config.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:09 +0800] "GET /gecko.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:09 +0800] "GET /tiny HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:09 +0800] "GET /tiny.php HTTP/1.1" 403 199 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:12 +0800] "GET /eFpU3yHnriNNLtvdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:12 +0800] "GET /class-wp-image.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:12 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:13 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:13 +0800] "GET /footer.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:13 +0800] "GET /img.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:14 +0800] "GET /12.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:14 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:14 +0800] "GET /xff.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:14 +0800] "GET /lib.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:15 +0800] "GET /roksad1.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:15 +0800] "GET /wmore1.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:15 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:16 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:16 +0800] "GET /dass.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:16 +0800] "GET /db.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:16 +0800] "GET /less.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:17 +0800] "GET /ws86.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:17 +0800] "GET /maxro.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:17 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:17 +0800] "GET /1s7y8wt9dz.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:18 +0800] "GET /bdktk.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:18 +0800] "GET /v5.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:18 +0800] "GET /ws85.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:18 +0800] "GET /ws87.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:19 +0800] "GET /layout.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:19 +0800] "GET /r2.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:19 +0800] "GET /ah25.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:19 +0800] "GET /006.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:20 +0800] "GET /samll.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:20 +0800] "GET /zogy1.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:20 +0800] "GET /aios-bootstrap.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:20 +0800] "GET /rh.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:21 +0800] "GET /gz.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:21 +0800] "GET /gelio1.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:21 +0800] "GET /areak1.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:21 +0800] "GET /qqa.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:22 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:22 +0800] "GET /ga.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:22 +0800] "GET /xozx.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:22 +0800] "GET /1100.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:23 +0800] "GET /press.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:23 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:23 +0800] "GET /wp-kz.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:23 +0800] "GET /wp-lo.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:24 +0800] "GET /fone1.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:24 +0800] "GET /Ipv6.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:24 +0800] "GET /file-gertdxz.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:24 +0800] "GET /xper1.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:25 +0800] "GET /yuzuru1.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:25 +0800] "GET /wglum1.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:25 +0800] "GET /saorix1.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:25 +0800] "GET /xper.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:26 +0800] "GET /wxpass.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:26 +0800] "GET /000.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:26 +0800] "GET //config.php? HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:26 +0800] "GET /x3x.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:27 +0800] "GET /xy.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:27 +0800] "GET /global.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:28 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:28 +0800] "GET /link.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:28 +0800] "GET /ortasekerli1.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:28 +0800] "GET /wp-block.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:29 +0800] "GET /wp-includes/wincust.php HTTP/1.1" 403 199 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:33 +0800] "GET /acp.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:34 +0800] "GET /fs.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:34 +0800] "GET /xltt.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:34 +0800] "GET /ws57.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:35 +0800] "GET /ws61.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:35 +0800] "GET /ws66.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:35 +0800] "GET /ws80.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:35 +0800] "GET /xynz.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:36 +0800] "GET /wp-01ul.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:36 +0800] "GET /e7.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:36 +0800] "GET /e3.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:36 +0800] "GET /aevly.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:37 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:37 +0800] "GET /wp-class.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:37 +0800] "GET /cilus.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:37 +0800] "GET /d.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:38 +0800] "GET /error_log.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:38 +0800] "GET /Ov-Simple1.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:38 +0800] "GET /curl.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:38 +0800] "GET /sallu.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:39 +0800] "GET //f6.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:39 +0800] "GET //edit.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:39 +0800] "GET //aa.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:39 +0800] "GET /goods_260325043000.php HTTP/1.1" 403 261 "-" "-" 51.103.118.101 - - [14/Apr/2026:18:51:40 +0800] "GET /goods_260401065719.php HTTP/1.1" 403 261 "-" "-" 64.89.163.113 - - [14/Apr/2026:19:02:55 +0800] "GET / HTTP/1.1" 403 261 "-" "-" 35.240.173.5 - - [15/Apr/2026:00:14:59 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "-" 158.69.227.165 - - [15/Apr/2026:00:28:33 +0800] "GET /.well-known/acme-challenge/222898ecfee666e813fd76fbdebf15c6key HTTP/1.0" 200 33 "-" "-" 216.81.248.211 - - [15/Apr/2026:01:11:13 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows; U; ; en-NZ) AppleWebKit/527 (KHTML, like Gecko, Safari/419.3) Arora/0.8.0" 65.87.7.61 - - [15/Apr/2026:04:26:24 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 216.73.216.152 - - [15/Apr/2026:17:44:22 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.152 - - [15/Apr/2026:17:44:22 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "" 216.73.216.152 - - [15/Apr/2026:17:44:22 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 158.69.227.165 - - [16/Apr/2026:00:54:56 +0800] "GET /.well-known/acme-challenge/adc3caeac279fad032458420989084d6key HTTP/1.0" 200 33 "-" "-" 23.178.112.210 - - [16/Apr/2026:00:55:04 +0800] "GET /.well-known/acme-challenge/KrmNTFSiKFn2aJl1uIRgt24NB-pvu0zapiUE1Z41ui8 HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 47.129.118.194 - - [16/Apr/2026:00:55:04 +0800] "GET /.well-known/acme-challenge/KrmNTFSiKFn2aJl1uIRgt24NB-pvu0zapiUE1Z41ui8 HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 52.41.77.123 - - [16/Apr/2026:00:55:04 +0800] "GET /.well-known/acme-challenge/KrmNTFSiKFn2aJl1uIRgt24NB-pvu0zapiUE1Z41ui8 HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 18.217.69.71 - - [16/Apr/2026:00:55:05 +0800] "GET /.well-known/acme-challenge/KrmNTFSiKFn2aJl1uIRgt24NB-pvu0zapiUE1Z41ui8 HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 13.53.70.119 - - [16/Apr/2026:00:55:05 +0800] "GET /.well-known/acme-challenge/KrmNTFSiKFn2aJl1uIRgt24NB-pvu0zapiUE1Z41ui8 HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 23.178.112.210 - - [16/Apr/2026:00:55:08 +0800] "GET /.well-known/acme-challenge/cCYx97EG-M5TiXQWr17LqUjAcfeBiM7eimbkh-H8oHI HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 13.212.192.75 - - [16/Apr/2026:00:55:09 +0800] "GET /.well-known/acme-challenge/cCYx97EG-M5TiXQWr17LqUjAcfeBiM7eimbkh-H8oHI HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 54.184.145.181 - - [16/Apr/2026:00:55:09 +0800] "GET /.well-known/acme-challenge/cCYx97EG-M5TiXQWr17LqUjAcfeBiM7eimbkh-H8oHI HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 3.19.241.44 - - [16/Apr/2026:00:55:09 +0800] "GET /.well-known/acme-challenge/cCYx97EG-M5TiXQWr17LqUjAcfeBiM7eimbkh-H8oHI HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 13.60.224.31 - - [16/Apr/2026:00:55:09 +0800] "GET /.well-known/acme-challenge/cCYx97EG-M5TiXQWr17LqUjAcfeBiM7eimbkh-H8oHI HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 91.231.89.123 - - [16/Apr/2026:01:23:41 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 91.231.89.126 - - [16/Apr/2026:01:23:48 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 91.231.89.35 - - [16/Apr/2026:01:26:33 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 91.231.89.122 - - [16/Apr/2026:01:26:57 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 205.169.39.36 - - [16/Apr/2026:01:46:17 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 137.184.70.146 - - [16/Apr/2026:01:46:51 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 12) Chrome/111.0 Mobile Safari/537.36" 173.239.220.24 - - [16/Apr/2026:01:51:16 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 173.239.220.24 - - [16/Apr/2026:01:51:17 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 35.198.227.241 - - [16/Apr/2026:01:53:09 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 35.198.227.241 - - [16/Apr/2026:01:53:09 +0800] "GET /wordpress/ HTTP/1.1" 403 261 "-" "curl/7.83.1" 23.178.112.219 - - [16/Apr/2026:02:04:55 +0800] "GET /.well-known/acme-challenge/t3td1O3jD6Kdef_5O_Izvya41jrf8RSKPAYtJtcLdIc HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 13.229.125.141 - - [16/Apr/2026:02:04:55 +0800] "GET /.well-known/acme-challenge/t3td1O3jD6Kdef_5O_Izvya41jrf8RSKPAYtJtcLdIc HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 35.91.235.218 - - [16/Apr/2026:02:04:55 +0800] "GET /.well-known/acme-challenge/t3td1O3jD6Kdef_5O_Izvya41jrf8RSKPAYtJtcLdIc HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 18.117.133.226 - - [16/Apr/2026:02:04:55 +0800] "GET /.well-known/acme-challenge/t3td1O3jD6Kdef_5O_Izvya41jrf8RSKPAYtJtcLdIc HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 13.60.97.208 - - [16/Apr/2026:02:04:56 +0800] "GET /.well-known/acme-challenge/t3td1O3jD6Kdef_5O_Izvya41jrf8RSKPAYtJtcLdIc HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 23.178.112.106 - - [16/Apr/2026:02:04:59 +0800] "GET /.well-known/acme-challenge/hgsoH32OPZKkvA1UXD7lbowdibfMX7lgfQfX7Rh7FJE HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 13.229.98.191 - - [16/Apr/2026:02:05:00 +0800] "GET /.well-known/acme-challenge/hgsoH32OPZKkvA1UXD7lbowdibfMX7lgfQfX7Rh7FJE HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 54.184.145.181 - - [16/Apr/2026:02:05:00 +0800] "GET /.well-known/acme-challenge/hgsoH32OPZKkvA1UXD7lbowdibfMX7lgfQfX7Rh7FJE HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 18.218.112.74 - - [16/Apr/2026:02:05:00 +0800] "GET /.well-known/acme-challenge/hgsoH32OPZKkvA1UXD7lbowdibfMX7lgfQfX7Rh7FJE HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 16.16.218.186 - - [16/Apr/2026:02:05:00 +0800] "GET /.well-known/acme-challenge/hgsoH32OPZKkvA1UXD7lbowdibfMX7lgfQfX7Rh7FJE HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 194.36.25.40 - - [16/Apr/2026:02:08:10 +0800] "GET / HTTP/1.1" 403 261 "https://test.thegreenscapecollective.com.au" "Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.16" 194.36.25.40 - - [16/Apr/2026:02:08:12 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "https://test.thegreenscapecollective.com.au" "Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.16" 194.36.25.40 - - [16/Apr/2026:02:08:39 +0800] "GET / HTTP/1.1" 403 261 "https://www.test.thegreenscapecollective.com.au" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.2 Safari/605.1.15" 194.36.25.40 - - [16/Apr/2026:02:08:42 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "https://www.test.thegreenscapecollective.com.au" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.2 Safari/605.1.15" 91.231.89.101 - - [16/Apr/2026:02:33:10 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 91.231.89.98 - - [16/Apr/2026:02:36:32 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 91.231.89.100 - - [16/Apr/2026:02:36:39 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 57.151.143.184 - - [16/Apr/2026:02:37:07 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36" 91.231.89.102 - - [16/Apr/2026:02:37:17 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 91.200.101.138 - - [16/Apr/2026:02:43:17 +0800] "POST /graphql HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) WormGPT/4.1" 91.200.101.138 - - [16/Apr/2026:02:43:18 +0800] "POST /graphql HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) WormGPT/4.1" 137.184.70.146 - - [16/Apr/2026:02:59:50 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 20.168.119.18 - - [16/Apr/2026:03:14:44 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36" 20.168.111.85 - - [16/Apr/2026:03:15:25 +0800] "GET /.git/config HTTP/1.1" 403 199 "https://docs.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Brave/131" 4.227.174.177 - - [16/Apr/2026:03:18:35 +0800] "GET /.git/config HTTP/1.1" 403 199 "https://twitter.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36" 20.231.101.39 - - [16/Apr/2026:03:30:50 +0800] "GET /.git/config HTTP/1.1" 403 199 "https://mail.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Vivaldi/6.5.3206.50" 143.244.47.83 - - [16/Apr/2026:03:42:19 +0800] "GET / HTTP/1.1" 421 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 74.7.175.150 - - [16/Apr/2026:04:56:48 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.227.182 - - [16/Apr/2026:04:56:49 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.241.176 - - [16/Apr/2026:04:57:50 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.243.218 - - [16/Apr/2026:04:58:17 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.243.218 - - [16/Apr/2026:04:58:37 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 20.2.192.215 - - [16/Apr/2026:05:36:57 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:36:57 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:36:58 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:36:58 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:36:58 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:36:58 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:36:58 +0800] "GET /wp-content/plugins/twenty/login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:36:58 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:36:58 +0800] "GET /file3.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:36:58 +0800] "GET /wp-mail.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:36:59 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:36:59 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:36:59 +0800] "GET /.dj/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:36:59 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:36:59 +0800] "GET /php8.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:36:59 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:36:59 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:36:59 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:36:59 +0800] "GET /011i.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:00 +0800] "GET /sid3.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:00 +0800] "GET /166.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:00 +0800] "GET /wp-mail.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:00 +0800] "GET /leaf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:00 +0800] "GET /grsiuk.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:00 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:00 +0800] "GET /fs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:00 +0800] "GET /ws38.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:01 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:01 +0800] "GET /classsmtps.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:01 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:01 +0800] "GET /CDX1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:01 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:01 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:01 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:01 +0800] "GET /css.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:02 +0800] "GET /php.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:02 +0800] "GET /wp-Blogs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:02 +0800] "GET /wp-content/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:02 +0800] "GET /wp-content/plugins/beteng88/ws83.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:02 +0800] "GET /ws83.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:02 +0800] "GET /file61.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:02 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:02 +0800] "GET /y.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:02 +0800] "GET /akcc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:03 +0800] "GET /wp-admin/user/12.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:03 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:03 +0800] "GET /term.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:03 +0800] "GET /666.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:03 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:03 +0800] "GET /wp-config-sample.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:03 +0800] "GET /log.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:03 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:04 +0800] "GET /aa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:05 +0800] "GET /bolt.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:07 +0800] "GET /x.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:07 +0800] "GET /jga.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:07 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:07 +0800] "GET /vx.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:07 +0800] "GET /ws77.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:07 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:07 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:08 +0800] "GET /wp-content/plugins/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:08 +0800] "GET /asd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:08 +0800] "GET /default.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:08 +0800] "GET /gettest.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:08 +0800] "GET /install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:08 +0800] "GET /tfm.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:08 +0800] "GET /ws81.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:08 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:09 +0800] "GET /tmp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:09 +0800] "GET /wp-admin/maint/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:09 +0800] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:09 +0800] "GET /a.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:09 +0800] "GET /a1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:09 +0800] "GET /onclickfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:09 +0800] "GET /w.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:09 +0800] "GET /wp-admin/maint/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:09 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:10 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:10 +0800] "GET /.info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:10 +0800] "GET /config.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:10 +0800] "GET /item.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:10 +0800] "GET /m.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:05:37:10 +0800] "GET /rh.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 47.128.96.177 - - [16/Apr/2026:06:23:25 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; ttspider-feedback@tiktok.com)" 103.76.239.130 - - [16/Apr/2026:06:27:27 +0800] "GET / HTTP/1.1" 403 261 "http://www.baidu.com.au/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Mobile/15E148 Safari/604.1 OPT/5.0.6" 154.50.139.25 - - [16/Apr/2026:06:27:30 +0800] "GET / HTTP/1.1" 403 261 "https://www.google.com.au/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/140.0.7339.122 Mobile/15E148 Safari/604.1" 103.76.239.5 - - [16/Apr/2026:06:27:35 +0800] "GET / HTTP/1.1" 403 261 "https://thegreenscapecollective.com.au/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.2 EdgiOS/84.0.522.44 Mobile/15E148 Safari/605.1.15" 58.107.80.115 - - [16/Apr/2026:06:27:41 +0800] "GET / HTTP/1.1" 403 261 "https://thegreenscapecollective.com.au/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Mobile/15E148 Safari/604.1" 149.18.169.231 - - [16/Apr/2026:06:27:44 +0800] "GET / HTTP/1.1" 403 261 "https://www.bing.com.au/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/92.0.4515.90 Mobile/15E148 Safari/604.1" 103.73.53.33 - - [16/Apr/2026:06:27:46 +0800] "GET / HTTP/1.1" 403 261 "http://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Mobile/15E148 Safari/604.1" 49.185.27.235 - - [16/Apr/2026:06:27:48 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Mobile/15E148 Safari/604.1 OPT/5.3.0" 194.193.202.192 - - [16/Apr/2026:06:27:50 +0800] "GET / HTTP/1.1" 403 261 "http://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/122.0.2365.99 Version/17.0 Mobile/15E148 Safari/604.1" 103.73.53.194 - - [16/Apr/2026:06:27:55 +0800] "GET / HTTP/1.1" 403 261 "https://thegreenscapecollective.com.au/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_8_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.7 Mobile/15E148 Safari/604.1" 45.93.128.120 - - [16/Apr/2026:06:28:00 +0800] "GET / HTTP/1.1" 403 261 "https://thegreenscapecollective.com.au/" "Mozilla/5.0 (iPhone; CPU iPhone OS 14_6 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.5020.46 Safari/537.36 OPR/85.0.3909.97" 103.76.238.93 - - [16/Apr/2026:06:28:01 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_8_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) GSA/355.0.723646882 Mobile/15E148 Safari/604.1" 103.76.237.65 - - [16/Apr/2026:06:28:08 +0800] "GET / HTTP/1.1" 403 261 "https://thegreenscapecollective.com.au/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/122.0.2365.99 Version/17.0 Mobile/15E148 Safari/604.1" 74.7.175.150 - - [16/Apr/2026:07:02:10 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.241.176 - - [16/Apr/2026:07:03:06 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 153.76.8.243 - - [16/Apr/2026:07:43:00 +0800] "GET /adminer.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 153.76.15.18 - - [16/Apr/2026:07:43:01 +0800] "GET /adminer/adminer.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 153.76.13.74 - - [16/Apr/2026:07:43:02 +0800] "GET /_adminer.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 153.76.10.238 - - [16/Apr/2026:07:43:03 +0800] "GET /admin/adminer.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 20.193.52.210 - - [16/Apr/2026:08:27:19 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:19 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:19 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:19 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:19 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:19 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:19 +0800] "GET /wp-content/plugins/twenty/login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:19 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:19 +0800] "GET /file3.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:19 +0800] "GET /wp-mail.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:19 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:19 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:19 +0800] "GET /.dj/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:19 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:19 +0800] "GET /php8.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:19 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:19 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:19 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:19 +0800] "GET /011i.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:19 +0800] "GET /sid3.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:19 +0800] "GET /166.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /wp-mail.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /leaf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /grsiuk.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /fs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /ws38.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /classsmtps.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /CDX1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /css.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /php.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /wp-Blogs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /wp-content/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /wp-content/plugins/beteng88/ws83.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /ws83.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /file61.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /y.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /akcc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /wp-admin/user/12.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /term.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /666.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /wp-config-sample.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /log.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /aa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /bolt.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /x.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /jga.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /vx.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /ws77.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /wp-content/plugins/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /asd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /default.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /gettest.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /tfm.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /ws81.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /tmp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /wp-admin/maint/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /a.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /a1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /onclickfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:20 +0800] "GET /w.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:21 +0800] "GET /wp-admin/maint/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:21 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:21 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:21 +0800] "GET /.info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:21 +0800] "GET /config.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:21 +0800] "GET /item.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:21 +0800] "GET /m.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.193.52.210 - - [16/Apr/2026:08:27:21 +0800] "GET /rh.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 98.93.160.221 - - [16/Apr/2026:09:10:33 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138 Safari/537.36" 98.93.160.221 - - [16/Apr/2026:10:07:03 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.2; rv:128.12) Gecko/20100101 Firefox/128.12" 205.169.39.1 - - [16/Apr/2026:14:07:30 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:34 +0800] "GET /elp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:34 +0800] "GET /ftde.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:34 +0800] "GET /wp-temp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:35 +0800] "GET /admin/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:35 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:35 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:35 +0800] "GET /wp-blog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:35 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:35 +0800] "GET /CDX2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:35 +0800] "GET /profile.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:35 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:36 +0800] "GET /ws80.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:36 +0800] "GET /403.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:36 +0800] "GET /a4.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:36 +0800] "GET /app.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:36 +0800] "GET /buy.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:36 +0800] "GET /core.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:36 +0800] "GET /lock360.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:36 +0800] "GET /wp-block.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:36 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:37 +0800] "GET /wp-includes/images/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:37 +0800] "GET /hplfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:37 +0800] "GET /lock.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:37 +0800] "GET /radio.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:37 +0800] "GET /wp-content/themes/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:38 +0800] "GET /wp-content/upgrade/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:38 +0800] "GET /wp-includes/fonts.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:38 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:38 +0800] "GET /ws49.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:38 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:39 +0800] "GET /xozx.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:39 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:39 +0800] "GET /Cap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:39 +0800] "GET /ahax.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:39 +0800] "GET /byrgo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:39 +0800] "GET /num.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:39 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:39 +0800] "GET /12.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:39 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:40 +0800] "GET /archive.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:40 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:40 +0800] "GET /db.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:40 +0800] "GET /error.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:40 +0800] "GET /ortasekerli1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:40 +0800] "GET /wp-blog-header.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:40 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:40 +0800] "GET /wp-includes/class-wp-http-client.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:41 +0800] "GET /wp-includes/configuration.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:41 +0800] "GET /0x.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:42 +0800] "GET /aaa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:42 +0800] "GET /byp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:42 +0800] "GET /dropdown.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:42 +0800] "GET /mini.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:42 +0800] "GET /new.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:42 +0800] "GET /option.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:42 +0800] "GET /s.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:43 +0800] "GET /size.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:43 +0800] "GET /system_log.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:43 +0800] "GET /tool.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:43 +0800] "GET /wp-admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:43 +0800] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:43 +0800] "GET /about/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:44 +0800] "GET /albin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:44 +0800] "GET /alfa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:44 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:44 +0800] "GET /av.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:44 +0800] "GET /dragonshell.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:44 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:44 +0800] "GET /gg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:44 +0800] "GET /gifclass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:45 +0800] "GET /sql.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:45 +0800] "GET /up.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:45 +0800] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:45 +0800] "GET /wp-admin/js/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.2.192.215 - - [16/Apr/2026:14:27:45 +0800] "GET /wp-p2r3q9c8k4.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 152.42.140.213 - - [16/Apr/2026:14:54:33 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 152.42.140.213 - - [16/Apr/2026:14:54:34 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "http://test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 152.42.140.213 - - [16/Apr/2026:14:54:36 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 152.42.140.213 - - [16/Apr/2026:14:54:43 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "https://test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 205.169.39.48 - - [16/Apr/2026:15:23:22 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 74.7.175.150 - - [16/Apr/2026:15:26:28 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.241.176 - - [16/Apr/2026:15:27:30 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 47.128.112.171 - - [16/Apr/2026:15:53:23 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)" 208.66.93.171 - - [16/Apr/2026:15:57:28 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.6601.1360 Mobile Safari/537.36" 110.249.202.140 - - [16/Apr/2026:15:57:47 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)" 103.76.239.150 - - [16/Apr/2026:16:06:16 +0800] "GET / HTTP/1.1" 403 261 "https://www.bing.com.au/" "Mozilla/5.0 (Linux; Android 14; Pixel 6 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.119 Mobile Safari/537.36 OPR/81.2.4292.78581" 103.76.237.94 - - [16/Apr/2026:16:06:21 +0800] "GET / HTTP/1.1" 403 261 "https://thegreenscapecollective.com.au/" "Mozilla/5.0 (Linux; Android 14; Pixel 6 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.119 Mobile Safari/537.36 OPR/81.2.4292.78581" 103.76.236.127 - - [16/Apr/2026:16:06:23 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 8.0.0; SM-J330G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 EdgA/114.0.1823.74" 103.76.236.191 - - [16/Apr/2026:16:06:24 +0800] "GET / HTTP/1.1" 403 261 "http://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.199 Mobile Safari/537.36 (compatible; Google-InspectionTool/1.0)" 172.59.129.151 - - [16/Apr/2026:16:06:25 +0800] "GET / HTTP/1.1" 403 261 "http://www.baidu.com.au/" "Mozilla/5.0 (Linux; Android 10; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36" 103.76.236.202 - - [16/Apr/2026:16:06:32 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 220.239.206.30 - - [16/Apr/2026:16:06:34 +0800] "GET / HTTP/1.1" 403 261 "http://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36" 103.76.238.138 - - [16/Apr/2026:16:06:35 +0800] "GET / HTTP/1.1" 403 261 "http://www.baidu.com.au/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36" 103.76.237.222 - - [16/Apr/2026:16:06:36 +0800] "GET / HTTP/1.1" 403 261 "http://www.baidu.com.au/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36" 154.28.234.209 - - [16/Apr/2026:16:06:43 +0800] "GET / HTTP/1.1" 403 261 "https://thegreenscapecollective.com.au/" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.224 Mobile Safari/537.36 (compatible; Google-InspectionTool/1.0)" 104.171.150.111 - - [16/Apr/2026:16:06:53 +0800] "GET / HTTP/1.1" 403 261 "https://thegreenscapecollective.com.au/" "Mozilla/5.0 (Linux; Android 10; SM-G998XU; Build/QQ1D.210515.94) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.3296.42 Mobile Safari/537.36 EdgA/137.0.3296.42" 159.89.114.66 - - [16/Apr/2026:16:09:21 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 159.89.114.66 - - [16/Apr/2026:16:09:21 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "http://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 159.89.114.66 - - [16/Apr/2026:16:09:23 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 159.89.114.66 - - [16/Apr/2026:16:09:29 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "https://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 74.7.175.150 - - [16/Apr/2026:18:35:42 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.241.176 - - [16/Apr/2026:18:36:46 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 20.166.7.149 - - [16/Apr/2026:20:18:51 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:18:51 +0800] "GET /tymi.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:18:52 +0800] "GET /4GrJSiwkF3A.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:18:53 +0800] "GET /SS72_kKKjT.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:18:53 +0800] "GET /wkogn.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:18:53 +0800] "GET /hwjtry0zd1fzeakcuzn8Cdefault.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:18:54 +0800] "GET /cilus.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:18:54 +0800] "GET /oLEzRVqmJJPFSucdefault.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:18:55 +0800] "GET /wwdgl.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:18:56 +0800] "GET /3akp.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:18:56 +0800] "GET /HLA-dd.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:18:56 +0800] "GET /BhqKs28Cw94.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:18:56 +0800] "GET /cdn3.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:18:57 +0800] "GET /3Cr1w6dfjTK.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:18:57 +0800] "GET /beerd.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:18:57 +0800] "GET /hhxc.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:18:57 +0800] "GET /161dfd072f.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:18:58 +0800] "GET /ws80.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:18:58 +0800] "GET /ylzed0twj8l9drdbchc1oocfCdefault.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:18:58 +0800] "GET /RIP.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:18:59 +0800] "GET /no18.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:18:59 +0800] "GET /blqjs.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:18:59 +0800] "GET /sk25_1.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:18:59 +0800] "GET /fetch.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:00 +0800] "GET /eFpU3yHnriNNLtvdefault.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:02 +0800] "GET /2nzyHnOkEg.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:02 +0800] "GET /oircv.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:02 +0800] "GET /blnux.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:03 +0800] "GET /n3yUmQ6Q9xwQ8ocdefault.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:03 +0800] "GET /Spow_SRw.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:03 +0800] "GET /albrt.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:03 +0800] "GET /xxivicLhot.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:04 +0800] "GET /7logs.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:04 +0800] "GET /acc.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:04 +0800] "GET /wxeyc.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:04 +0800] "GET /xltt.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:05 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:05 +0800] "GET /fyflv.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:06 +0800] "GET /zc-942.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:06 +0800] "GET /sde.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:07 +0800] "GET /wpb.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:07 +0800] "GET /Geforce.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:07 +0800] "GET /9EaklzMysJ.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:08 +0800] "GET /wpxl.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:08 +0800] "GET /s3FiyJ2WGCnF0p1default.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:08 +0800] "GET /bfil.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:09 +0800] "GET /lb.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:09 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:09 +0800] "GET /menu.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:09 +0800] "GET /p14rAeWytPdH5hZcscCFdefault.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:10 +0800] "GET /iindv.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:10 +0800] "GET /maintura.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:10 +0800] "GET /iee52ruz0s81ndrdefault.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:11 +0800] "GET /nvwf4svpvqohxdjtbjCdefault.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:11 +0800] "GET /zc-220.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:11 +0800] "GET /r9pbhistk1lifhnjadpCdefault.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:12 +0800] "GET /fone1.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:12 +0800] "GET /xxiviLDIot.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:12 +0800] "GET /hanyatersenyum.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:12 +0800] "GET /5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:13 +0800] "GET /upll22.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:13 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:13 +0800] "GET /byrgo.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:14 +0800] "GET /zc-243.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:14 +0800] "GET /pm90apbv3v5fvgkbguyiCdefault.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:14 +0800] "GET /CDX1.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:15 +0800] "GET /gvg1bvpsgtot1rpklCdefault.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:15 +0800] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:15 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:16 +0800] "GET /file61.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:16 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:16 +0800] "GET /tx79.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:17 +0800] "GET /CDX2.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:17 +0800] "GET /666.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:17 +0800] "GET /wtiiy.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:17 +0800] "GET /Sanskrit.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:18 +0800] "GET /motu.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:18 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:18 +0800] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:18 +0800] "GET /gifclass.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:19 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:19 +0800] "GET /jga.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:19 +0800] "GET /term.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:20 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:20 +0800] "GET /Ov-Simple1.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:20 +0800] "GET /dass.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:20 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:21 +0800] "GET /ta0ol.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:21 +0800] "GET /wp-png.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:21 +0800] "GET /tfm.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:21 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:22 +0800] "GET /kj.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:22 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:22 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:23 +0800] "GET /lib.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:23 +0800] "GET /bolt.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:23 +0800] "GET //file61.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:23 +0800] "GET /uuu.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:24 +0800] "GET /gptsh.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:24 +0800] "GET /mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:24 +0800] "GET /sid3.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:26 +0800] "GET /ogifomnzqnlvwh5womfjirvaCdefault.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:26 +0800] "GET /Cap.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:26 +0800] "GET /lmutxdvyp7u5yksqke8ozbjgCdefault.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:27 +0800] "GET /torsa1.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:27 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:27 +0800] "GET /zoper1.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:27 +0800] "GET /ortasekerli1.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:28 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:28 +0800] "GET /wmore1.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:28 +0800] "GET /new3.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:28 +0800] "GET //nw.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:29 +0800] "GET /byypas.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:29 +0800] "GET /rithin.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:29 +0800] "GET /a4.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:30 +0800] "GET /jlex.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:30 +0800] "GET /xsas.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:30 +0800] "GET /wp/jp.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:30 +0800] "GET /8573.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:31 +0800] "GET /wp5.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:31 +0800] "GET /wp9.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:31 +0800] "GET /ws88.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:31 +0800] "GET //motu.php HTTP/1.1" 403 261 "-" "-" 20.166.7.149 - - [16/Apr/2026:20:19:32 +0800] "GET /ibcqocdtu3eovdx2hwj7Cdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:44 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:45 +0800] "GET /tymi.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:45 +0800] "GET /4GrJSiwkF3A.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:45 +0800] "GET /SS72_kKKjT.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:46 +0800] "GET /wkogn.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:46 +0800] "GET /hwjtry0zd1fzeakcuzn8Cdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:46 +0800] "GET /cilus.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:46 +0800] "GET /oLEzRVqmJJPFSucdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:47 +0800] "GET /wwdgl.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:47 +0800] "GET /3akp.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:47 +0800] "GET /HLA-dd.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:47 +0800] "GET /BhqKs28Cw94.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:47 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:48 +0800] "GET /cdn3.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:48 +0800] "GET /tymi.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:48 +0800] "GET /3Cr1w6dfjTK.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:48 +0800] "GET /4GrJSiwkF3A.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:48 +0800] "GET /beerd.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:48 +0800] "GET /SS72_kKKjT.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:48 +0800] "GET /wkogn.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:48 +0800] "GET /hhxc.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:49 +0800] "GET /hwjtry0zd1fzeakcuzn8Cdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:49 +0800] "GET /161dfd072f.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:49 +0800] "GET /cilus.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:49 +0800] "GET /ws80.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:49 +0800] "GET /oLEzRVqmJJPFSucdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:49 +0800] "GET /ylzed0twj8l9drdbchc1oocfCdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:49 +0800] "GET /wwdgl.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:49 +0800] "GET /RIP.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:50 +0800] "GET /3akp.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:50 +0800] "GET /no18.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:50 +0800] "GET /HLA-dd.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:50 +0800] "GET /blqjs.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:50 +0800] "GET /BhqKs28Cw94.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:50 +0800] "GET /sk25_1.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:51 +0800] "GET /cdn3.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:51 +0800] "GET /3Cr1w6dfjTK.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:51 +0800] "GET /beerd.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:51 +0800] "GET /hhxc.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:51 +0800] "GET /fetch.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:52 +0800] "GET /161dfd072f.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:52 +0800] "GET /eFpU3yHnriNNLtvdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:52 +0800] "GET /ws80.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:52 +0800] "GET /ylzed0twj8l9drdbchc1oocfCdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:52 +0800] "GET /RIP.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:53 +0800] "GET /no18.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:53 +0800] "GET /blqjs.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:53 +0800] "GET /2nzyHnOkEg.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:53 +0800] "GET /sk25_1.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:54 +0800] "GET /oircv.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:54 +0800] "GET /blnux.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:55 +0800] "GET /n3yUmQ6Q9xwQ8ocdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:55 +0800] "GET /Spow_SRw.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:53 +0800] "GET /fetch.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:55 +0800] "GET /eFpU3yHnriNNLtvdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:55 +0800] "GET /albrt.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:55 +0800] "GET /2nzyHnOkEg.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:55 +0800] "GET /xxivicLhot.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:55 +0800] "GET /oircv.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:56 +0800] "GET /7logs.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:56 +0800] "GET /blnux.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:56 +0800] "GET /acc.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:56 +0800] "GET /wxeyc.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:56 +0800] "GET /n3yUmQ6Q9xwQ8ocdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:56 +0800] "GET /xltt.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:56 +0800] "GET /Spow_SRw.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:57 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:57 +0800] "GET /albrt.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:57 +0800] "GET /fyflv.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:57 +0800] "GET /xxivicLhot.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:57 +0800] "GET /7logs.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:58 +0800] "GET /acc.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:58 +0800] "GET /zc-942.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:58 +0800] "GET /wxeyc.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:58 +0800] "GET /sde.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:58 +0800] "GET /xltt.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:58 +0800] "GET /wpb.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:58 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:59 +0800] "GET /Geforce.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:59 +0800] "GET /9EaklzMysJ.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:59 +0800] "GET /fyflv.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:59 +0800] "GET /wpxl.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:59 +0800] "GET /zc-942.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:59 +0800] "GET /s3FiyJ2WGCnF0p1default.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:23:59 +0800] "GET /sde.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:00 +0800] "GET /bfil.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:00 +0800] "GET /wpb.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:00 +0800] "GET /lb.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:00 +0800] "GET /Geforce.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:00 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:00 +0800] "GET /9EaklzMysJ.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:00 +0800] "GET /menu.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:00 +0800] "GET /wpxl.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:01 +0800] "GET /p14rAeWytPdH5hZcscCFdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:01 +0800] "GET /s3FiyJ2WGCnF0p1default.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:01 +0800] "GET /iindv.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:01 +0800] "GET /bfil.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:01 +0800] "GET /maintura.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:01 +0800] "GET /lb.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:01 +0800] "GET /iee52ruz0s81ndrdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:02 +0800] "GET /nvwf4svpvqohxdjtbjCdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:02 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:02 +0800] "GET /zc-220.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:02 +0800] "GET /r9pbhistk1lifhnjadpCdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:02 +0800] "GET /menu.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:02 +0800] "GET /fone1.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:03 +0800] "GET /xxiviLDIot.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:03 +0800] "GET /p14rAeWytPdH5hZcscCFdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:07 +0800] "GET /iindv.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:03 +0800] "GET /hanyatersenyum.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:07 +0800] "GET /5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:07 +0800] "GET /maintura.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:07 +0800] "GET /upll22.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:07 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:07 +0800] "GET /iee52ruz0s81ndrdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:08 +0800] "GET /nvwf4svpvqohxdjtbjCdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:08 +0800] "GET /byrgo.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:08 +0800] "GET /zc-243.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:08 +0800] "GET /pm90apbv3v5fvgkbguyiCdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:08 +0800] "GET /CDX1.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:09 +0800] "GET /gvg1bvpsgtot1rpklCdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:09 +0800] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:09 +0800] "GET /zc-220.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:09 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:09 +0800] "GET /r9pbhistk1lifhnjadpCdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:09 +0800] "GET /file61.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:10 +0800] "GET /fone1.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:10 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:10 +0800] "GET /xxiviLDIot.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:10 +0800] "GET /tx79.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:10 +0800] "GET /hanyatersenyum.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:10 +0800] "GET /CDX2.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:10 +0800] "GET /5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:10 +0800] "GET /666.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:11 +0800] "GET /upll22.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:11 +0800] "GET /wtiiy.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:11 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:11 +0800] "GET /byrgo.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:11 +0800] "GET /Sanskrit.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:11 +0800] "GET /zc-243.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:11 +0800] "GET /motu.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:12 +0800] "GET /pm90apbv3v5fvgkbguyiCdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:12 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:12 +0800] "GET /CDX1.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:12 +0800] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:12 +0800] "GET /gvg1bvpsgtot1rpklCdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:12 +0800] "GET /gifclass.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:12 +0800] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:12 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:13 +0800] "GET /jga.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:13 +0800] "GET /term.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:13 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:13 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:13 +0800] "GET /Ov-Simple1.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:13 +0800] "GET /file61.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:14 +0800] "GET /dass.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:14 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:14 +0800] "GET /tx79.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:14 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:14 +0800] "GET /CDX2.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:14 +0800] "GET /ta0ol.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:15 +0800] "GET /666.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:15 +0800] "GET /wp-png.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:15 +0800] "GET /wtiiy.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:15 +0800] "GET /tfm.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:15 +0800] "GET /Sanskrit.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:15 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:15 +0800] "GET /motu.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:15 +0800] "GET /kj.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:16 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:16 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:16 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:16 +0800] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:16 +0800] "GET /lib.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:16 +0800] "GET /gifclass.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:17 +0800] "GET /bolt.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:17 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:17 +0800] "GET /jga.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:17 +0800] "GET //file61.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:17 +0800] "GET /term.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:17 +0800] "GET /uuu.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:17 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:17 +0800] "GET /gptsh.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:18 +0800] "GET /Ov-Simple1.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:18 +0800] "GET /mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:18 +0800] "GET /dass.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:18 +0800] "GET /sid3.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:18 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:18 +0800] "GET /ta0ol.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:19 +0800] "GET /wp-png.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:19 +0800] "GET /tfm.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:19 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:19 +0800] "GET /kj.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:20 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:20 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:20 +0800] "GET /lib.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:20 +0800] "GET /bolt.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:21 +0800] "GET //file61.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:21 +0800] "GET /uuu.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:21 +0800] "GET /ogifomnzqnlvwh5womfjirvaCdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:21 +0800] "GET /gptsh.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:21 +0800] "GET /Cap.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:22 +0800] "GET /mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:22 +0800] "GET /lmutxdvyp7u5yksqke8ozbjgCdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:22 +0800] "GET /sid3.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:22 +0800] "GET /torsa1.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:22 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:23 +0800] "GET /zoper1.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:23 +0800] "GET /ortasekerli1.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:23 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:23 +0800] "GET /wmore1.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:24 +0800] "GET /new3.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:24 +0800] "GET //nw.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:24 +0800] "GET /byypas.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:24 +0800] "GET /rithin.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:25 +0800] "GET /a4.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:25 +0800] "GET /ogifomnzqnlvwh5womfjirvaCdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:25 +0800] "GET /jlex.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:25 +0800] "GET /Cap.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:25 +0800] "GET /xsas.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:25 +0800] "GET /lmutxdvyp7u5yksqke8ozbjgCdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:26 +0800] "GET /torsa1.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:26 +0800] "GET /wp/jp.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:26 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:26 +0800] "GET /8573.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:26 +0800] "GET /zoper1.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:26 +0800] "GET /wp5.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:26 +0800] "GET /ortasekerli1.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:26 +0800] "GET /wp9.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:27 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:27 +0800] "GET /ws88.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:27 +0800] "GET /wmore1.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:27 +0800] "GET //motu.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:27 +0800] "GET /ibcqocdtu3eovdx2hwj7Cdefault.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:28 +0800] "GET /new3.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:28 +0800] "GET //nw.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:28 +0800] "GET /byypas.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:29 +0800] "GET /rithin.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:29 +0800] "GET /a4.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:29 +0800] "GET /jlex.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:29 +0800] "GET /xsas.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:30 +0800] "GET /wp/jp.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:30 +0800] "GET /8573.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:31 +0800] "GET /wp5.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:31 +0800] "GET /wp9.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:31 +0800] "GET /ws88.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:31 +0800] "GET //motu.php HTTP/1.1" 403 261 "-" "-" 20.215.69.226 - - [16/Apr/2026:20:24:32 +0800] "GET /ibcqocdtu3eovdx2hwj7Cdefault.php HTTP/1.1" 403 261 "-" "-" 45.130.203.176 - - [16/Apr/2026:21:05:35 +0800] "GET /.git/HEAD HTTP/1.1" 403 199 "-" "Python-urllib/3.10" 45.130.203.158 - - [16/Apr/2026:21:05:35 +0800] "GET /.git/HEAD HTTP/1.1" 403 199 "-" "Python-urllib/3.10" 34.69.139.229 - - [16/Apr/2026:22:51:50 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 34.169.154.215 - - [16/Apr/2026:23:14:52 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 34.63.18.246 - - [16/Apr/2026:23:19:02 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 18.212.24.65 - - [16/Apr/2026:23:19:33 +0800] "GET /_ignition/execute-solution HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.4 Safari/605.1.15" 18.212.24.65 - - [16/Apr/2026:23:59:24 +0800] "GET /_ignition/execute-solution HTTP/1.1" 403 261 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 34.78.22.147 - - [17/Apr/2026:00:48:12 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 136.109.121.12 - - [17/Apr/2026:02:15:19 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.109.121.12 - - [17/Apr/2026:02:15:19 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.109.121.12 - - [17/Apr/2026:02:15:19 +0800] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.109.121.12 - - [17/Apr/2026:02:15:19 +0800] "GET /xmlrpc.php?rsd HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.109.121.12 - - [17/Apr/2026:02:15:20 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.109.121.12 - - [17/Apr/2026:02:15:20 +0800] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.109.121.12 - - [17/Apr/2026:02:15:20 +0800] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.109.121.12 - - [17/Apr/2026:02:15:20 +0800] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.109.121.12 - - [17/Apr/2026:02:15:20 +0800] "GET /website/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.109.121.12 - - [17/Apr/2026:02:15:21 +0800] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.109.121.12 - - [17/Apr/2026:02:15:21 +0800] "GET /news/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.109.121.12 - - [17/Apr/2026:02:15:21 +0800] "GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.109.121.12 - - [17/Apr/2026:02:15:21 +0800] "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.109.121.12 - - [17/Apr/2026:02:15:21 +0800] "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.109.121.12 - - [17/Apr/2026:02:15:21 +0800] "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.109.121.12 - - [17/Apr/2026:02:15:22 +0800] "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.109.121.12 - - [17/Apr/2026:02:15:22 +0800] "GET /media/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.109.121.12 - - [17/Apr/2026:02:15:22 +0800] "GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.109.121.12 - - [17/Apr/2026:02:15:22 +0800] "GET /site/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.109.121.12 - - [17/Apr/2026:02:15:22 +0800] "GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 136.109.121.12 - - [17/Apr/2026:02:15:23 +0800] "GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 51.103.127.33 - - [17/Apr/2026:02:33:01 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:01 +0800] "GET /tymi.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:01 +0800] "GET /4GrJSiwkF3A.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:02 +0800] "GET /SS72_kKKjT.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:02 +0800] "GET /wkogn.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:02 +0800] "GET /hwjtry0zd1fzeakcuzn8Cdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:02 +0800] "GET /cilus.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:03 +0800] "GET /oLEzRVqmJJPFSucdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:03 +0800] "GET /wwdgl.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:03 +0800] "GET /3akp.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:03 +0800] "GET /HLA-dd.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:04 +0800] "GET /BhqKs28Cw94.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:04 +0800] "GET /cdn3.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:04 +0800] "GET /3Cr1w6dfjTK.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:04 +0800] "GET /beerd.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:05 +0800] "GET /hhxc.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:05 +0800] "GET /161dfd072f.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:05 +0800] "GET /ws80.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:05 +0800] "GET /ylzed0twj8l9drdbchc1oocfCdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:06 +0800] "GET /RIP.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:06 +0800] "GET /no18.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:06 +0800] "GET /blqjs.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:07 +0800] "GET /sk25_1.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:07 +0800] "GET /fetch.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:07 +0800] "GET /eFpU3yHnriNNLtvdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:07 +0800] "GET /2nzyHnOkEg.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:08 +0800] "GET /oircv.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:08 +0800] "GET /blnux.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:08 +0800] "GET /n3yUmQ6Q9xwQ8ocdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:08 +0800] "GET /Spow_SRw.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:09 +0800] "GET /albrt.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:09 +0800] "GET /xxivicLhot.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:09 +0800] "GET /7logs.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:09 +0800] "GET /acc.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:10 +0800] "GET /wxeyc.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:10 +0800] "GET /xltt.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:10 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:11 +0800] "GET /fyflv.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:11 +0800] "GET /zc-942.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:11 +0800] "GET /sde.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:11 +0800] "GET /wpb.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:12 +0800] "GET /Geforce.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:12 +0800] "GET /9EaklzMysJ.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:12 +0800] "GET /wpxl.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:12 +0800] "GET /s3FiyJ2WGCnF0p1default.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:13 +0800] "GET /bfil.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:13 +0800] "GET /lb.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:13 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:13 +0800] "GET /menu.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:14 +0800] "GET /p14rAeWytPdH5hZcscCFdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:14 +0800] "GET /iindv.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:14 +0800] "GET /maintura.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:14 +0800] "GET /iee52ruz0s81ndrdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:15 +0800] "GET /nvwf4svpvqohxdjtbjCdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:15 +0800] "GET /zc-220.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:15 +0800] "GET /r9pbhistk1lifhnjadpCdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:15 +0800] "GET /fone1.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:16 +0800] "GET /xxiviLDIot.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:16 +0800] "GET /hanyatersenyum.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:16 +0800] "GET /5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:17 +0800] "GET /upll22.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:17 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:17 +0800] "GET /byrgo.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:17 +0800] "GET /zc-243.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:18 +0800] "GET /pm90apbv3v5fvgkbguyiCdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:18 +0800] "GET /CDX1.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:18 +0800] "GET /gvg1bvpsgtot1rpklCdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:18 +0800] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:19 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:19 +0800] "GET /file61.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:19 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:19 +0800] "GET /tx79.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:20 +0800] "GET /CDX2.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:20 +0800] "GET /666.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:20 +0800] "GET /wtiiy.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:20 +0800] "GET /Sanskrit.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:21 +0800] "GET /motu.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:21 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:21 +0800] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:22 +0800] "GET /gifclass.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:22 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:22 +0800] "GET /jga.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:22 +0800] "GET /term.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:23 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:23 +0800] "GET /Ov-Simple1.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:23 +0800] "GET /dass.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:23 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:24 +0800] "GET /ta0ol.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:24 +0800] "GET /wp-png.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:24 +0800] "GET /tfm.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:24 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:25 +0800] "GET /kj.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:25 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:25 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:25 +0800] "GET /lib.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:26 +0800] "GET /bolt.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:26 +0800] "GET //file61.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:26 +0800] "GET /uuu.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:27 +0800] "GET /gptsh.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:27 +0800] "GET /mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:27 +0800] "GET /sid3.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:28 +0800] "GET /ogifomnzqnlvwh5womfjirvaCdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:28 +0800] "GET /Cap.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:28 +0800] "GET /lmutxdvyp7u5yksqke8ozbjgCdefault.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:29 +0800] "GET /torsa1.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:29 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:29 +0800] "GET /zoper1.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:29 +0800] "GET /ortasekerli1.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:30 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:30 +0800] "GET /wmore1.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:30 +0800] "GET /new3.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:30 +0800] "GET //nw.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:31 +0800] "GET /byypas.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:31 +0800] "GET /rithin.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:31 +0800] "GET /a4.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:32 +0800] "GET /jlex.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:32 +0800] "GET /xsas.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:32 +0800] "GET /wp/jp.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:32 +0800] "GET /8573.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:33 +0800] "GET /wp5.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:33 +0800] "GET /wp9.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:33 +0800] "GET /ws88.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:33 +0800] "GET //motu.php HTTP/1.1" 403 261 "-" "-" 51.103.127.33 - - [17/Apr/2026:02:33:34 +0800] "GET /ibcqocdtu3eovdx2hwj7Cdefault.php HTTP/1.1" 403 261 "-" "-" 138.246.253.24 - - [17/Apr/2026:04:39:40 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 20.100.206.196 - - [17/Apr/2026:06:29:38 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:29:39 +0800] "GET /flower.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:29:39 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:29:39 +0800] "GET /doc.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:29:39 +0800] "GET /mifta.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:29:40 +0800] "GET /Geforce.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:29:40 +0800] "GET /packsin1.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:29:40 +0800] "GET /xs.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:29:40 +0800] "GET /son1.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:29:41 +0800] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:29:45 +0800] "GET /aboute.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:29:46 +0800] "GET /pp.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:29:47 +0800] "GET /ng.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:29:48 +0800] "GET /tiny2.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:29:48 +0800] "GET /state.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:29:48 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:29:48 +0800] "GET /wps.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:29:49 +0800] "GET /ayk.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:29:49 +0800] "GET /wgift1.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:29:49 +0800] "GET /ss.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:29:49 +0800] "GET /tx79.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:29:50 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:29:50 +0800] "GET /wp-admin/images/admin.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:29:50 +0800] "GET /config.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:29:51 +0800] "GET /gecko.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:29:51 +0800] "GET /tiny HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:29:51 +0800] "GET /tiny.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:29:59 +0800] "GET /eFpU3yHnriNNLtvdefault.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:03 +0800] "GET /eFpU3yHnriNNLtvdefault.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:06 +0800] "GET /eFpU3yHnriNNLtvdefault.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:10 +0800] "GET /class-wp-image.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:15 +0800] "GET /class-wp-image.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:20 +0800] "GET /class-wp-image.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:24 +0800] "GET /class-wp-image.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:30 +0800] "GET /8.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:32 +0800] "GET /8.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:33 +0800] "GET /8.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:35 +0800] "GET /8.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:37 +0800] "GET /sadcut1.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:39 +0800] "GET /sadcut1.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:39 +0800] "GET /sadcut1.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:41 +0800] "GET /sadcut1.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:42 +0800] "GET /footer.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:45 +0800] "GET /footer.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:46 +0800] "GET /footer.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:48 +0800] "GET /footer.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:49 +0800] "GET /img.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:51 +0800] "GET /img.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:52 +0800] "GET /img.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:53 +0800] "GET /img.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:54 +0800] "GET /12.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:54 +0800] "GET /12.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:55 +0800] "GET /12.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:56 +0800] "GET /12.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:57 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:57 +0800] "GET /xff.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:57 +0800] "GET /lib.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:58 +0800] "GET /roksad1.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:58 +0800] "GET /wmore1.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:58 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:59 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:30:59 +0800] "GET /dass.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:00 +0800] "GET /db.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:00 +0800] "GET /less.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:00 +0800] "GET /ws86.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:00 +0800] "GET /maxro.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:01 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:01 +0800] "GET /1s7y8wt9dz.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:01 +0800] "GET /bdktk.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:01 +0800] "GET /v5.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:02 +0800] "GET /ws85.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:02 +0800] "GET /ws87.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:02 +0800] "GET /layout.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:02 +0800] "GET /r2.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:03 +0800] "GET /ah25.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:03 +0800] "GET /006.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:03 +0800] "GET /samll.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:04 +0800] "GET /zogy1.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:04 +0800] "GET /aios-bootstrap.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:05 +0800] "GET /rh.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:05 +0800] "GET /gz.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:05 +0800] "GET /gelio1.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:05 +0800] "GET /areak1.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:06 +0800] "GET /qqa.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:06 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:06 +0800] "GET /ga.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:07 +0800] "GET /xozx.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:07 +0800] "GET /1100.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:07 +0800] "GET /press.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:08 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:08 +0800] "GET /wp-kz.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:08 +0800] "GET /wp-lo.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:08 +0800] "GET /fone1.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:09 +0800] "GET /Ipv6.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:09 +0800] "GET /file-gertdxz.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:09 +0800] "GET /xper1.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:10 +0800] "GET /yuzuru1.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:11 +0800] "GET /yuzuru1.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:12 +0800] "GET /yuzuru1.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:15 +0800] "GET /yuzuru1.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:17 +0800] "GET /wglum1.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:19 +0800] "GET /wglum1.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:21 +0800] "GET /wglum1.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:22 +0800] "GET /wglum1.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:24 +0800] "GET /saorix1.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:25 +0800] "GET /saorix1.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:26 +0800] "GET /saorix1.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:27 +0800] "GET /saorix1.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:28 +0800] "GET /xper.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:28 +0800] "GET /xper.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:29 +0800] "GET /xper.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:30 +0800] "GET /xper.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:31 +0800] "GET /wxpass.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:32 +0800] "GET /wxpass.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:33 +0800] "GET /wxpass.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:34 +0800] "GET /wxpass.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:35 +0800] "GET /000.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:35 +0800] "GET /000.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:36 +0800] "GET /000.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:37 +0800] "GET /000.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:37 +0800] "GET //config.php? HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:38 +0800] "GET //config.php? HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:39 +0800] "GET //config.php? HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:39 +0800] "GET //config.php? HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:40 +0800] "GET /x3x.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:41 +0800] "GET /x3x.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:42 +0800] "GET /x3x.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:43 +0800] "GET /x3x.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:44 +0800] "GET /xy.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:45 +0800] "GET /xy.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:45 +0800] "GET /xy.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:46 +0800] "GET /xy.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:47 +0800] "GET /global.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:47 +0800] "GET /global.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:48 +0800] "GET /global.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:49 +0800] "GET /global.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:49 +0800] "GET /themes.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:50 +0800] "GET /themes.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:51 +0800] "GET /themes.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:52 +0800] "GET /themes.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:53 +0800] "GET /link.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:54 +0800] "GET /link.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:55 +0800] "GET /link.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:55 +0800] "GET /link.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:57 +0800] "GET /ortasekerli1.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:31:59 +0800] "GET /ortasekerli1.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:00 +0800] "GET /ortasekerli1.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:02 +0800] "GET /ortasekerli1.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:03 +0800] "GET /wp-block.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:06 +0800] "GET /wp-block.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:06 +0800] "GET /wp-block.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:08 +0800] "GET /wp-includes/wincust.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:07 +0800] "GET /wp-block.php HTTP/1.1" 403 199 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:10 +0800] "GET /acp.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:10 +0800] "GET /fs.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:10 +0800] "GET /xltt.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:11 +0800] "GET /ws57.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:11 +0800] "GET /ws61.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:11 +0800] "GET /ws66.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:11 +0800] "GET /ws80.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:12 +0800] "GET /xynz.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:12 +0800] "GET /wp-01ul.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:13 +0800] "GET /e7.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:13 +0800] "GET /e3.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:14 +0800] "GET /aevly.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:15 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:15 +0800] "GET /wp-class.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:16 +0800] "GET /cilus.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:16 +0800] "GET /d.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:16 +0800] "GET /error_log.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:17 +0800] "GET /Ov-Simple1.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:17 +0800] "GET /curl.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:17 +0800] "GET /sallu.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:17 +0800] "GET //f6.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:18 +0800] "GET //edit.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:18 +0800] "GET //aa.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:18 +0800] "GET /goods_260325043000.php HTTP/1.1" 403 261 "-" "-" 20.100.206.196 - - [17/Apr/2026:06:32:18 +0800] "GET /goods_260401065719.php HTTP/1.1" 403 261 "-" "-" 74.7.175.150 - - [17/Apr/2026:09:10:36 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.241.176 - - [17/Apr/2026:09:12:50 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 161.123.208.227 - - [17/Apr/2026:09:41:04 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; CrOS x86_64 14092.77.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.107 Safari/537.36" 198.23.239.147 - - [17/Apr/2026:10:32:58 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 176.65.148.161 - - [17/Apr/2026:13:50:01 +0800] "HEAD / HTTP/1.1" 403 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 198.235.24.212 - - [17/Apr/2026:16:15:14 +0800] "GET / HTTP/1.1" 403 261 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 138.246.253.24 - - [17/Apr/2026:18:41:42 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 68.155.146.132 - - [17/Apr/2026:22:05:21 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0" 35.193.140.229 - - [18/Apr/2026:00:12:20 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 35.193.140.229 - - [18/Apr/2026:00:12:20 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 172.213.146.73 - - [18/Apr/2026:00:19:26 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:26 +0800] "GET /file6.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:26 +0800] "GET //sl.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:26 +0800] "GET /flox.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:27 +0800] "GET /mff.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:27 +0800] "GET /aq.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:27 +0800] "GET //filemanger2.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:27 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:28 +0800] "GET /wp-vn1.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:28 +0800] "GET /ewp.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:28 +0800] "GET /kikikoko.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:28 +0800] "GET //nwflm.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:29 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:29 +0800] "GET /xff.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:29 +0800] "GET /lupo.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:30 +0800] "GET /awa.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:30 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:30 +0800] "GET /popo.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:30 +0800] "GET /water.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:31 +0800] "GET /ggb.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:31 +0800] "GET /13.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:31 +0800] "GET /wert.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:32 +0800] "GET /11.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:32 +0800] "GET /p.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:32 +0800] "GET /oij98gy.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:32 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:33 +0800] "GET /turkshell.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:33 +0800] "GET /tea.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:33 +0800] "GET /seo.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:33 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:34 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:34 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:34 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:35 +0800] "GET /3.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:35 +0800] "GET /4.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:35 +0800] "GET /5.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:35 +0800] "GET /6.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:36 +0800] "GET /9.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:36 +0800] "GET /10.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:36 +0800] "GET /.mopj.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:36 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:37 +0800] "GET /nano.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:38 +0800] "GET /f35_S.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:38 +0800] "GET /2026w.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:38 +0800] "GET /111.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:38 +0800] "GET /wp1.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:39 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:39 +0800] "GET /byrgo.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:40 +0800] "GET //xwpg.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:40 +0800] "GET /ass.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:41 +0800] "GET //about.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:41 +0800] "GET /no18.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:41 +0800] "GET /fine.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:41 +0800] "GET /zample.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:42 +0800] "GET /hplfuns.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:43 +0800] "GET /xa.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:43 +0800] "GET //admin.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:44 +0800] "GET /inege.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:44 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:44 +0800] "GET /uuu.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:45 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:45 +0800] "GET /no1.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:45 +0800] "GET /w2025.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:45 +0800] "GET /fvvff.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:46 +0800] "GET /a2.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:46 +0800] "GET //edit.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:46 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:47 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:47 +0800] "GET /66.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:47 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:47 +0800] "GET /ol.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:48 +0800] "GET //f6.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:48 +0800] "GET //inputs.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:48 +0800] "GET /style.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:48 +0800] "GET //aa.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:49 +0800] "GET //av.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:49 +0800] "GET /wp-admin/css/bolt.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:49 +0800] "GET /bless4.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:49 +0800] "GET /wp-act.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:50 +0800] "GET /xqq.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:50 +0800] "GET /plss3.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:50 +0800] "GET /aaa.php?p= HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:51 +0800] "GET /classwithtostring.php?p= HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:51 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:51 +0800] "GET /tinyfilemanager.php?p= HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:51 +0800] "GET /wp-update.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:52 +0800] "GET /sbhu.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:52 +0800] "GET /wp-blog.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:52 +0800] "GET //wp-includes/js/jquery/ HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:52 +0800] "GET //wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:53 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:53 +0800] "GET //adminfuns.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:53 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:53 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:54 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:54 +0800] "GET //cgi-bin/index.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:54 +0800] "GET /fff.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:55 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:55 +0800] "GET /we.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:55 +0800] "GET /alpha.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:55 +0800] "GET /makeasmtp.php?p= HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:58 +0800] "GET /wp-michan.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:58 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:58 +0800] "GET //wp-includes/css/dist/ HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:58 +0800] "GET /BDKR28WP.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:59 +0800] "GET //wp-includes/l10n/ HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:59 +0800] "GET /wen.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:59 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:19:59 +0800] "GET /wp-admin/js/fi.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:00 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:00 +0800] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:00 +0800] "GET /av.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:00 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:01 +0800] "GET /fi.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:01 +0800] "GET //a1.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:01 +0800] "GET /update/f35.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:02 +0800] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 199 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:03 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:03 +0800] "GET //wp-includes/css/index.php?p= HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:03 +0800] "GET /wp-includes/SimplePie/ HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:03 +0800] "GET /prv8.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:03 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:04 +0800] "GET /dev.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:04 +0800] "GET /bal.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:06 +0800] "GET /in.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:06 +0800] "GET /gssdd.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:06 +0800] "GET /motu.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:06 +0800] "GET /bs1.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:07 +0800] "GET /bengi.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:07 +0800] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:07 +0800] "GET /axx.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:07 +0800] "GET /alfashell.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:08 +0800] "GET /gettest.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:08 +0800] "GET /acp.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:08 +0800] "GET /file48.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:08 +0800] "GET /g.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:08 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:09 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:09 +0800] "GET /ew.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:09 +0800] "GET /file21.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:09 +0800] "GET /class19.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:10 +0800] "GET /class20.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:10 +0800] "GET /file18.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:10 +0800] "GET /vee.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:10 +0800] "GET /cabs.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:14 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:14 +0800] "GET /x1da.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:14 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "-" 172.213.146.73 - - [18/Apr/2026:00:20:15 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "-" 74.7.175.183 - - [18/Apr/2026:01:34:36 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.241.131 - - [18/Apr/2026:01:35:37 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 35.212.222.103 - - [18/Apr/2026:04:37:03 +0800] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 35.212.222.103 - - [18/Apr/2026:04:38:05 +0800] "GET /.env.old HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 35.212.222.103 - - [18/Apr/2026:04:38:32 +0800] "GET /core/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 35.212.222.103 - - [18/Apr/2026:04:39:04 +0800] "GET /laravel/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 35.212.222.103 - - [18/Apr/2026:04:39:34 +0800] "GET /src/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 35.212.222.103 - - [18/Apr/2026:04:40:02 +0800] "GET /shared/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 20.91.129.11 - - [18/Apr/2026:07:22:37 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:37 +0800] "GET /cs.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:37 +0800] "GET /zxcs.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:38 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:38 +0800] "GET /shell20211028.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:38 +0800] "GET /shadow-bot.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:38 +0800] "GET /str_replace.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:39 +0800] "GET /Hd.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:39 +0800] "GET /maint.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:39 +0800] "GET /nosaSq.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:39 +0800] "GET /class-wp-oembed-beta.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:40 +0800] "GET /tentang_rmol.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:40 +0800] "GET /yellow.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:40 +0800] "GET /block-template-utils.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:40 +0800] "GET /14.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:41 +0800] "GET /update_with_pics.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:41 +0800] "GET /date-object.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:41 +0800] "GET /w-1.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:41 +0800] "GET /zwso.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:42 +0800] "GET /bbh.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:42 +0800] "GET /gool.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:42 +0800] "GET /class-wp-pagebuilders-BDsjLk.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:43 +0800] "GET /iiiihjwn.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:43 +0800] "GET /ru_RU_lite.mo.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:43 +0800] "GET /wpputty.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:43 +0800] "GET /dodo.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:44 +0800] "GET /wp-post-data.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:44 +0800] "GET /class-wp-recovery-mode-key-service-add.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:44 +0800] "GET /Marvins.php HTTP/1.1" 403 261 "-" "-" 20.91.129.11 - - [18/Apr/2026:07:22:44 +0800] "GET /astab.php HTTP/1.1" 403 261 "-" "-" 68.183.195.77 - - [18/Apr/2026:14:18:51 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 68.183.195.77 - - [18/Apr/2026:14:18:51 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "http://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 68.183.195.77 - - [18/Apr/2026:14:18:52 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 68.183.195.77 - - [18/Apr/2026:14:18:58 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "https://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 137.184.37.48 - - [18/Apr/2026:14:20:26 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 137.184.37.48 - - [18/Apr/2026:14:20:26 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "http://test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 137.184.37.48 - - [18/Apr/2026:14:20:27 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 137.184.37.48 - - [18/Apr/2026:14:20:31 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "https://test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 84.32.70.55 - - [18/Apr/2026:15:31:15 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:124.0) Gecko/20100101 Firefox/124.0" 205.210.31.186 - - [18/Apr/2026:18:13:06 +0800] "GET / HTTP/1.1" 403 261 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 68.155.146.132 - - [18/Apr/2026:19:02:54 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 185.8.106.232 - - [18/Apr/2026:23:17:58 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (iPhone; U; CPU iPhone OS 2_0 like Mac OS X; en-us) AppleWebKit/525.18.1 (KHTML, like Gecko) Version/3.1.1 Mobile/5A347 Safari/525.200" 91.200.101.138 - - [19/Apr/2026:00:19:31 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.200.101.138 - - [19/Apr/2026:00:19:31 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.140.253 - - [19/Apr/2026:08:14:11 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:11 +0800] "GET /golden.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:11 +0800] "GET /wp-load.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:11 +0800] "GET /.well-known/log.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:12 +0800] "GET /xl2023.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:12 +0800] "GET /wp-content/upgrade/f35.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:12 +0800] "GET /.well-known/Hd.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:12 +0800] "GET /wp-post-data.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:12 +0800] "GET /xmu.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:13 +0800] "GET /ref.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:13 +0800] "GET /wp-xme.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:13 +0800] "GET /adminer.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:13 +0800] "GET /ktfow.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:14 +0800] "GET /mode.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:14 +0800] "GET /Xx.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:14 +0800] "GET /xmini.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:14 +0800] "GET /2468.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:15 +0800] "GET //wp-admin/js/index.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:15 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:15 +0800] "GET /amdin.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:15 +0800] "GET /huya.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:16 +0800] "GET /puc.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:16 +0800] "GET //themes.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:16 +0800] "GET /ewp.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:16 +0800] "GET /kikikoko.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:17 +0800] "GET //nwflm.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:17 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:17 +0800] "GET /xff.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:17 +0800] "GET /lupo.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:18 +0800] "GET /awa.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:18 +0800] "GET /popo.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:18 +0800] "GET /13.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:18 +0800] "GET /11.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:18 +0800] "GET /p.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:19 +0800] "GET //wp-includes/Requests/ HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:19 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:19 +0800] "GET //shell.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:19 +0800] "GET /tea.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:20 +0800] "GET /seo.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:20 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:20 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:20 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:21 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:21 +0800] "GET /3.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:21 +0800] "GET /4.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:21 +0800] "GET /5.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:22 +0800] "GET /6.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:22 +0800] "GET /9.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:22 +0800] "GET /10.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:22 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:23 +0800] "GET /.well-known/nastar.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:23 +0800] "GET /f35_S.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:23 +0800] "GET /2026w.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:23 +0800] "GET /111.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:24 +0800] "GET /wp1.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:24 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:24 +0800] "GET /byrgo.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:24 +0800] "GET //xwpg.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:25 +0800] "GET /ass.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:25 +0800] "GET //about.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:25 +0800] "GET /no18.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:25 +0800] "GET /fine.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:26 +0800] "GET /hplfuns.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:26 +0800] "GET /xa.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:26 +0800] "GET //admin.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:26 +0800] "GET /inege.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:26 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:27 +0800] "GET /uuu.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:27 +0800] "GET /no1.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:27 +0800] "GET /w2025.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:27 +0800] "GET /fvvff.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:28 +0800] "GET /a2.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:28 +0800] "GET //edit.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:28 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:28 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:29 +0800] "GET /66.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:29 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:29 +0800] "GET /ol.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:29 +0800] "GET //f6.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:30 +0800] "GET //inputs.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:30 +0800] "GET /style.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:30 +0800] "GET //aa.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:30 +0800] "GET //av.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:31 +0800] "GET /wp-admin/css/bolt.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:31 +0800] "GET /wp-act.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:31 +0800] "GET /xqq.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:31 +0800] "GET /plss3.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:32 +0800] "GET /aaa.php?p= HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:32 +0800] "GET /classwithtostring.php?p= HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:32 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:32 +0800] "GET /tinyfilemanager.php?p= HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:32 +0800] "GET /wp-update.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:33 +0800] "GET /sbhu.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:33 +0800] "GET /wp-blog.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:33 +0800] "GET //wp-includes/js/jquery/ HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:33 +0800] "GET //wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:34 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:34 +0800] "GET //adminfuns.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:34 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:36 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:36 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:36 +0800] "GET //cgi-bin/index.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:37 +0800] "GET /fff.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:37 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:37 +0800] "GET /we.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:37 +0800] "GET /alpha.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:38 +0800] "GET /makeasmtp.php?p= HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:38 +0800] "GET /wp-michan.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:38 +0800] "GET //admin1.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:38 +0800] "GET //wp-includes/css/dist/ HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:39 +0800] "GET /BDKR28WP.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:39 +0800] "GET //wp-includes/l10n/ HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:39 +0800] "GET /wen.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:39 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:40 +0800] "GET /wp-admin/js/fi.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:40 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:40 +0800] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:40 +0800] "GET /av.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:41 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:41 +0800] "GET /fi.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:41 +0800] "GET //a1.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:41 +0800] "GET /update/f35.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:42 +0800] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 199 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:42 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:42 +0800] "GET //wp-includes/css/index.php?p= HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:43 +0800] "GET /wp-includes/SimplePie/ HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:43 +0800] "GET //wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:43 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:43 +0800] "GET /dev.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:44 +0800] "GET /bal.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:44 +0800] "GET /in.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:44 +0800] "GET /gssdd.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:44 +0800] "GET //cgi-bin/admin.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:45 +0800] "GET /bs1.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:45 +0800] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:45 +0800] "GET /axx.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:45 +0800] "GET /alfashell.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:46 +0800] "GET /gettest.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:46 +0800] "GET /acp.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:46 +0800] "GET /file48.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:46 +0800] "GET /g.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:46 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:47 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:47 +0800] "GET /ew.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:47 +0800] "GET /file21.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:47 +0800] "GET /hypo.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:48 +0800] "GET /file18.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:48 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:48 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "-" 20.203.140.253 - - [19/Apr/2026:08:14:48 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "-" 47.128.112.157 - - [19/Apr/2026:10:01:10 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)" 20.19.184.69 - - [19/Apr/2026:10:35:19 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:19 +0800] "GET /file6.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:19 +0800] "GET //sl.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:19 +0800] "GET /flox.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:20 +0800] "GET /mff.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:20 +0800] "GET /aq.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:20 +0800] "GET //filemanger2.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:20 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:21 +0800] "GET /wp-vn1.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:21 +0800] "GET /ewp.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:21 +0800] "GET /kikikoko.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:21 +0800] "GET //nwflm.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:22 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:22 +0800] "GET /xff.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:22 +0800] "GET /lupo.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:22 +0800] "GET /awa.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:23 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:23 +0800] "GET /popo.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:23 +0800] "GET /water.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:23 +0800] "GET /ggb.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:24 +0800] "GET /13.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:24 +0800] "GET /wert.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:24 +0800] "GET /11.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:24 +0800] "GET /p.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:25 +0800] "GET /oij98gy.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:25 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:25 +0800] "GET /turkshell.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:25 +0800] "GET /tea.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:26 +0800] "GET /seo.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:34 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:34 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:35 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:35 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:35 +0800] "GET /3.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:35 +0800] "GET /4.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:36 +0800] "GET /5.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:36 +0800] "GET /6.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:37 +0800] "GET /9.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:37 +0800] "GET /10.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:37 +0800] "GET /.mopj.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:37 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:38 +0800] "GET /nano.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:38 +0800] "GET /f35_S.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:38 +0800] "GET /2026w.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:39 +0800] "GET /111.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:39 +0800] "GET /wp1.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:39 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:40 +0800] "GET /byrgo.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:40 +0800] "GET //xwpg.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:40 +0800] "GET /ass.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:41 +0800] "GET //about.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:41 +0800] "GET /no18.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:41 +0800] "GET /fine.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:41 +0800] "GET /zample.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:42 +0800] "GET /hplfuns.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:42 +0800] "GET /xa.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:42 +0800] "GET //admin.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:42 +0800] "GET /inege.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:43 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:43 +0800] "GET /uuu.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:43 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:43 +0800] "GET /no1.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:44 +0800] "GET /w2025.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:44 +0800] "GET /fvvff.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:44 +0800] "GET /a2.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:44 +0800] "GET //edit.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:45 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:45 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:45 +0800] "GET /66.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:45 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:46 +0800] "GET /ol.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:46 +0800] "GET //f6.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:46 +0800] "GET //inputs.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:46 +0800] "GET /style.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:47 +0800] "GET //aa.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:47 +0800] "GET //av.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:47 +0800] "GET /wp-admin/css/bolt.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:48 +0800] "GET /bless4.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:48 +0800] "GET /wp-act.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:48 +0800] "GET /xqq.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:48 +0800] "GET /plss3.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:49 +0800] "GET /aaa.php?p= HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:49 +0800] "GET /classwithtostring.php?p= HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:49 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:49 +0800] "GET /tinyfilemanager.php?p= HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:50 +0800] "GET /wp-update.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:50 +0800] "GET /sbhu.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:50 +0800] "GET /wp-blog.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:50 +0800] "GET //wp-includes/js/jquery/ HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:51 +0800] "GET //wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:51 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:51 +0800] "GET //adminfuns.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:52 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:52 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:52 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:52 +0800] "GET //cgi-bin/index.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:53 +0800] "GET /fff.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:53 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:53 +0800] "GET /we.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:53 +0800] "GET /alpha.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:54 +0800] "GET /makeasmtp.php?p= HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:54 +0800] "GET /wp-michan.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:54 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:54 +0800] "GET //wp-includes/css/dist/ HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:55 +0800] "GET /BDKR28WP.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:55 +0800] "GET //wp-includes/l10n/ HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:56 +0800] "GET /wen.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:56 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:56 +0800] "GET /wp-admin/js/fi.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:56 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:57 +0800] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:57 +0800] "GET /av.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:57 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:57 +0800] "GET /fi.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:58 +0800] "GET //a1.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:58 +0800] "GET /update/f35.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:58 +0800] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 199 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:35:59 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:00 +0800] "GET //wp-includes/css/index.php?p= HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:00 +0800] "GET /wp-includes/SimplePie/ HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:00 +0800] "GET /prv8.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:01 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:01 +0800] "GET /dev.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:01 +0800] "GET /bal.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:02 +0800] "GET /in.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:02 +0800] "GET /gssdd.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:02 +0800] "GET /motu.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:02 +0800] "GET /bs1.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:03 +0800] "GET /bengi.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:03 +0800] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:03 +0800] "GET /axx.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:03 +0800] "GET /alfashell.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:04 +0800] "GET /gettest.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:05 +0800] "GET /acp.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:05 +0800] "GET /file48.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:05 +0800] "GET /g.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:06 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:06 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:06 +0800] "GET /ew.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:07 +0800] "GET /file21.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:07 +0800] "GET /class19.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:07 +0800] "GET /class20.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:08 +0800] "GET /file18.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:08 +0800] "GET /vee.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:08 +0800] "GET /cabs.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:08 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:09 +0800] "GET /x1da.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:09 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "-" 20.19.184.69 - - [19/Apr/2026:10:36:09 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "-" 2.24.211.46 - - [19/Apr/2026:18:00:43 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 2.24.211.46 - - [19/Apr/2026:18:00:43 +0800] "GET /.git/HEAD HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" 213.35.109.170 - - [19/Apr/2026:19:13:42 +0800] "POST /wp-content/plugins/wp-automatic/inc/csv.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/115.0" 129.159.56.14 - - [19/Apr/2026:20:15:55 +0800] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:83.0) Gecko/20100101 Firefox/83.0" 129.159.56.14 - - [19/Apr/2026:20:15:55 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:83.0) Gecko/20100101 Firefox/83.0" 51.107.70.111 - - [19/Apr/2026:22:12:21 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:22 +0800] "GET /file6.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:22 +0800] "GET //sl.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:22 +0800] "GET /flox.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:22 +0800] "GET /mff.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:23 +0800] "GET /aq.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:24 +0800] "GET //filemanger2.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:24 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:24 +0800] "GET /wp-vn1.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:25 +0800] "GET /ewp.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:25 +0800] "GET /kikikoko.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:25 +0800] "GET //nwflm.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:25 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:26 +0800] "GET /xff.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:26 +0800] "GET /lupo.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:26 +0800] "GET /awa.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:26 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:27 +0800] "GET /popo.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:27 +0800] "GET /water.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:27 +0800] "GET /ggb.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:27 +0800] "GET /13.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:28 +0800] "GET /wert.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:28 +0800] "GET /11.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:28 +0800] "GET /p.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:30 +0800] "GET /oij98gy.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:30 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:30 +0800] "GET /turkshell.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:31 +0800] "GET /tea.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:31 +0800] "GET /seo.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:31 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:31 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:32 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:32 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:32 +0800] "GET /3.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:32 +0800] "GET /4.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:33 +0800] "GET /5.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:33 +0800] "GET /6.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:33 +0800] "GET /9.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:34 +0800] "GET /10.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:34 +0800] "GET /.mopj.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:34 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:34 +0800] "GET /nano.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:36 +0800] "GET /f35_S.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:36 +0800] "GET /2026w.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:36 +0800] "GET /111.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:37 +0800] "GET /wp1.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:37 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:37 +0800] "GET /byrgo.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:37 +0800] "GET //xwpg.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:39 +0800] "GET /ass.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:39 +0800] "GET //about.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:39 +0800] "GET /no18.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:39 +0800] "GET /fine.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:40 +0800] "GET /zample.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:40 +0800] "GET /hplfuns.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:40 +0800] "GET /xa.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:40 +0800] "GET //admin.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:41 +0800] "GET /inege.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:41 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:41 +0800] "GET /uuu.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:41 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:42 +0800] "GET /no1.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:42 +0800] "GET /w2025.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:42 +0800] "GET /fvvff.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:43 +0800] "GET /a2.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:43 +0800] "GET //edit.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:43 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:43 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:44 +0800] "GET /66.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:44 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:44 +0800] "GET /ol.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:44 +0800] "GET //f6.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:45 +0800] "GET //inputs.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:45 +0800] "GET /style.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:45 +0800] "GET //aa.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:45 +0800] "GET //av.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:46 +0800] "GET /wp-admin/css/bolt.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:46 +0800] "GET /bless4.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:46 +0800] "GET /wp-act.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:46 +0800] "GET /xqq.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:47 +0800] "GET /plss3.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:47 +0800] "GET /aaa.php?p= HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:47 +0800] "GET /classwithtostring.php?p= HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:47 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:48 +0800] "GET /tinyfilemanager.php?p= HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:48 +0800] "GET /wp-update.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:48 +0800] "GET /sbhu.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:48 +0800] "GET /wp-blog.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:49 +0800] "GET //wp-includes/js/jquery/ HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:49 +0800] "GET //wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:49 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:49 +0800] "GET //adminfuns.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:50 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:50 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:50 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:50 +0800] "GET //cgi-bin/index.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:51 +0800] "GET /fff.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:51 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:51 +0800] "GET /we.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:51 +0800] "GET /alpha.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:51 +0800] "GET /makeasmtp.php?p= HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:53 +0800] "GET /wp-michan.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:54 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:54 +0800] "GET //wp-includes/css/dist/ HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:55 +0800] "GET /BDKR28WP.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:55 +0800] "GET //wp-includes/l10n/ HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:55 +0800] "GET /wen.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:55 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:56 +0800] "GET /wp-admin/js/fi.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:56 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:56 +0800] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:56 +0800] "GET /av.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:56 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:57 +0800] "GET /fi.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:58 +0800] "GET //a1.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:58 +0800] "GET /update/f35.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:12:59 +0800] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 199 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:10 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:11 +0800] "GET //wp-includes/css/index.php?p= HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:11 +0800] "GET /wp-includes/SimplePie/ HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:12 +0800] "GET /prv8.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:12 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:12 +0800] "GET /dev.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:13 +0800] "GET /bal.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:13 +0800] "GET /in.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:13 +0800] "GET /gssdd.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:13 +0800] "GET /motu.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:14 +0800] "GET /bs1.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:14 +0800] "GET /bengi.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:14 +0800] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:14 +0800] "GET /axx.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:15 +0800] "GET /alfashell.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:15 +0800] "GET /gettest.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:15 +0800] "GET /acp.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:15 +0800] "GET /file48.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:15 +0800] "GET /g.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:16 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:16 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:16 +0800] "GET /ew.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:17 +0800] "GET /file21.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:17 +0800] "GET /class19.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:17 +0800] "GET /class20.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:17 +0800] "GET /file18.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:18 +0800] "GET /vee.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:18 +0800] "GET /cabs.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:18 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:18 +0800] "GET /x1da.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:18 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "-" 51.107.70.111 - - [19/Apr/2026:22:13:19 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "-" 54.85.236.130 - - [19/Apr/2026:22:24:31 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 18.170.98.193 - - [20/Apr/2026:00:09:44 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0: Win64: x64: rv:140.0) Gecko/20100101 Firefox/140.0" 34.72.211.182 - - [20/Apr/2026:23:04:47 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 34.72.211.182 - - [20/Apr/2026:23:04:47 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 172.213.10.209 - - [21/Apr/2026:00:47:22 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 172.213.10.209 - - [21/Apr/2026:00:47:22 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "-" 172.213.10.209 - - [21/Apr/2026:00:47:22 +0800] "GET /Marvins.php HTTP/1.1" 403 261 "-" "-" 172.213.10.209 - - [21/Apr/2026:00:47:22 +0800] "GET /kcs.php HTTP/1.1" 403 261 "-" "-" 172.213.10.209 - - [21/Apr/2026:00:47:22 +0800] "GET /wp-post-data.php HTTP/1.1" 403 261 "-" "-" 172.213.10.209 - - [21/Apr/2026:00:47:23 +0800] "GET /shell20211022.php HTTP/1.1" 403 261 "-" "-" 172.213.10.209 - - [21/Apr/2026:00:47:23 +0800] "GET /shell20211028.php HTTP/1.1" 403 261 "-" "-" 172.213.10.209 - - [21/Apr/2026:00:47:23 +0800] "GET /cs.php HTTP/1.1" 403 261 "-" "-" 172.213.10.209 - - [21/Apr/2026:00:47:23 +0800] "GET /1index.php HTTP/1.1" 403 261 "-" "-" 172.213.10.209 - - [21/Apr/2026:00:47:24 +0800] "GET /subs/upload/upload.php HTTP/1.1" 403 261 "-" "-" 103.30.72.102 - - [21/Apr/2026:07:55:35 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:13:59:40 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:13:59:40 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:13:59:41 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:13:59:41 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:13:59:41 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:13:59:42 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:13:59:42 +0800] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:13:59:43 +0800] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:13:59:44 +0800] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:13:59:44 +0800] "GET /.env.staging HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:13:59:45 +0800] "GET /.env.development HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:13:59:46 +0800] "GET /.env.test HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:13:59:47 +0800] "GET /.env.remote HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:13:59:48 +0800] "GET /.env.bak HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:13:59:49 +0800] "GET /.env.backup HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:13:59:49 +0800] "GET /.env.save HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:13:59:50 +0800] "GET /.env.old HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:13:59:51 +0800] "GET /.env.sample HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:13:59:52 +0800] "GET /.env.example HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:13:59:53 +0800] "GET /.env.dev HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:13:59:54 +0800] "GET /.env.prod HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:13:59:54 +0800] "GET /.env.stage HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:13:59:55 +0800] "GET /.env.ci HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:13:59:56 +0800] "GET /.env.docker HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:13:59:57 +0800] "GET /.env.live HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:13:59:58 +0800] "GET /.env.preprod HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:13:59:59 +0800] "GET /.env.uat HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:13:59:59 +0800] "GET /.env.dist HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:14:00:00 +0800] "GET /.env.swp HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:14:00:01 +0800] "GET /.env~ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:14:00:02 +0800] "GET /app/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:14:00:03 +0800] "GET /apps/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:14:00:04 +0800] "GET /api/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:14:00:04 +0800] "GET /web/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:14:00:05 +0800] "GET /site/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:14:00:06 +0800] "GET /public/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:14:00:07 +0800] "GET /admin/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:14:00:08 +0800] "GET /backend/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.242.107.160 - - [21/Apr/2026:14:00:09 +0800] "GET /server/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:26:58 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:26:59 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:26:59 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:26:59 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:00 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:01 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:02 +0800] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:03 +0800] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:05 +0800] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:06 +0800] "GET /.env.staging HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:08 +0800] "GET /.env.development HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:09 +0800] "GET /.env.test HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:10 +0800] "GET /.env.remote HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:12 +0800] "GET /.env.bak HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:13 +0800] "GET /.env.backup HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:15 +0800] "GET /.env.save HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:16 +0800] "GET /.env.old HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:18 +0800] "GET /.env.sample HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:19 +0800] "GET /.env.example HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:21 +0800] "GET /.env.dev HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:22 +0800] "GET /.env.prod HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:24 +0800] "GET /.env.stage HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:25 +0800] "GET /.env.ci HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:27 +0800] "GET /.env.docker HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:30 +0800] "GET /.env.preprod HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:31 +0800] "GET /.env.uat HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:33 +0800] "GET /.env.dist HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:34 +0800] "GET /.env.swp HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:36 +0800] "GET /.env~ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:37 +0800] "GET /app/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:38 +0800] "GET /apps/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:40 +0800] "GET /api/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:41 +0800] "GET /web/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 56.124.40.146 - - [21/Apr/2026:14:27:43 +0800] "GET /site/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 45.86.200.236 - - [21/Apr/2026:15:36:27 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.236 - - [21/Apr/2026:15:36:27 +0800] "GET /cong.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.236 - - [21/Apr/2026:15:36:27 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.236 - - [21/Apr/2026:15:36:27 +0800] "GET /css.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.236 - - [21/Apr/2026:15:36:28 +0800] "GET /log.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.236 - - [21/Apr/2026:15:36:28 +0800] "GET /0x.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.236 - - [21/Apr/2026:15:36:28 +0800] "GET /aa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.236 - - [21/Apr/2026:15:36:29 +0800] "GET /doc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.236 - - [21/Apr/2026:15:36:29 +0800] "GET /elp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.236 - - [21/Apr/2026:15:36:29 +0800] "GET /tiny.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.219 - - [21/Apr/2026:15:36:30 +0800] "GET /edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.219 - - [21/Apr/2026:15:36:30 +0800] "GET /fm.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.235 - - [21/Apr/2026:15:36:30 +0800] "GET /dir.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.235 - - [21/Apr/2026:15:36:31 +0800] "GET /edit-tags.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.235 - - [21/Apr/2026:15:36:31 +0800] "GET /bak.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.235 - - [21/Apr/2026:15:36:36 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.235 - - [21/Apr/2026:15:36:36 +0800] "GET /system_log.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.235 - - [21/Apr/2026:15:36:36 +0800] "GET /filemanager.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.220 - - [21/Apr/2026:15:36:37 +0800] "GET /ini.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.220 - - [21/Apr/2026:15:36:37 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.220 - - [21/Apr/2026:15:36:37 +0800] "GET /term.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.220 - - [21/Apr/2026:15:36:38 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.220 - - [21/Apr/2026:15:36:38 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.220 - - [21/Apr/2026:15:36:38 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.220 - - [21/Apr/2026:15:36:38 +0800] "GET /wsa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.220 - - [21/Apr/2026:15:36:39 +0800] "GET /tinyfilemanager.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.215 - - [21/Apr/2026:15:36:39 +0800] "GET /bless.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.215 - - [21/Apr/2026:15:36:39 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.215 - - [21/Apr/2026:15:36:40 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.215 - - [21/Apr/2026:15:36:40 +0800] "GET /readme.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.215 - - [21/Apr/2026:15:36:40 +0800] "GET /wp-file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.215 - - [21/Apr/2026:15:36:41 +0800] "GET /marijuana.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.215 - - [21/Apr/2026:15:36:41 +0800] "GET /mini.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.215 - - [21/Apr/2026:15:36:41 +0800] "GET /bk.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.215 - - [21/Apr/2026:15:36:41 +0800] "GET /wpn.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.215 - - [21/Apr/2026:15:36:42 +0800] "GET /robots.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.215 - - [21/Apr/2026:15:36:42 +0800] "GET /wp-class.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.215 - - [21/Apr/2026:15:36:42 +0800] "GET /wp-sigunq.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.215 - - [21/Apr/2026:15:36:43 +0800] "GET /wp-atom.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.215 - - [21/Apr/2026:15:36:43 +0800] "GET /alfanew.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.215 - - [21/Apr/2026:15:36:43 +0800] "GET /lock.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.215 - - [21/Apr/2026:15:36:43 +0800] "GET /fw.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.215 - - [21/Apr/2026:15:36:44 +0800] "GET /hehe.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.215 - - [21/Apr/2026:15:36:44 +0800] "GET /sym.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.215 - - [21/Apr/2026:15:36:51 +0800] "GET /sys.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.215 - - [21/Apr/2026:15:36:51 +0800] "GET /wp-user.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.215 - - [21/Apr/2026:15:36:52 +0800] "GET /wp-editor.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.251 - - [21/Apr/2026:15:36:52 +0800] "GET /wp-editor.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.251 - - [21/Apr/2026:15:36:52 +0800] "GET /hehehehe.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.251 - - [21/Apr/2026:15:36:53 +0800] "GET /wp-settings.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.251 - - [21/Apr/2026:15:36:53 +0800] "GET /makeasmtp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.251 - - [21/Apr/2026:15:36:53 +0800] "GET /wp-content.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.251 - - [21/Apr/2026:15:36:54 +0800] "GET /wp-db.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.251 - - [21/Apr/2026:15:36:54 +0800] "GET /options-reading.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.251 - - [21/Apr/2026:15:36:54 +0800] "GET /alfa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.251 - - [21/Apr/2026:15:36:54 +0800] "GET /cmd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.251 - - [21/Apr/2026:15:36:55 +0800] "GET /class.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.251 - - [21/Apr/2026:15:36:55 +0800] "GET /xl2023.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.251 - - [21/Apr/2026:15:36:55 +0800] "GET /wp-head.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.251 - - [21/Apr/2026:15:36:55 +0800] "GET /wp-admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.251 - - [21/Apr/2026:15:36:56 +0800] "GET /mah.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.251 - - [21/Apr/2026:15:36:56 +0800] "GET /go.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.251 - - [21/Apr/2026:15:36:56 +0800] "GET /byp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.251 - - [21/Apr/2026:15:36:57 +0800] "GET /in.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.251 - - [21/Apr/2026:15:36:57 +0800] "GET /geju.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.251 - - [21/Apr/2026:15:36:57 +0800] "GET /wp-signup.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.251 - - [21/Apr/2026:15:36:57 +0800] "GET /wp-l0gin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.251 - - [21/Apr/2026:15:36:58 +0800] "GET /bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.251 - - [21/Apr/2026:15:36:58 +0800] "GET /wp-activate.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.82.72.103 - - [21/Apr/2026:15:36:59 +0800] "GET /wp-activate.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.82.72.103 - - [21/Apr/2026:15:36:59 +0800] "GET /a.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.82.72.103 - - [21/Apr/2026:15:36:59 +0800] "GET /randkeyword.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.82.72.103 - - [21/Apr/2026:15:36:59 +0800] "GET /lv.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.82.72.103 - - [21/Apr/2026:15:37:00 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.82.72.103 - - [21/Apr/2026:15:37:00 +0800] "GET /wp-cron.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.82.72.103 - - [21/Apr/2026:15:37:00 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.82.72.103 - - [21/Apr/2026:15:37:00 +0800] "GET /wp-links.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.82.72.103 - - [21/Apr/2026:15:37:01 +0800] "GET /wp-info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.82.72.103 - - [21/Apr/2026:15:37:10 +0800] "GET /wp-config-sample.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.82.72.103 - - [21/Apr/2026:15:37:10 +0800] "GET /manager.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.82.72.103 - - [21/Apr/2026:15:37:10 +0800] "GET /functions.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.82.72.103 - - [21/Apr/2026:15:37:11 +0800] "GET /wp-mail.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.82.72.103 - - [21/Apr/2026:15:37:11 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.82.72.103 - - [21/Apr/2026:15:37:11 +0800] "GET /wp-configs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.82.72.103 - - [21/Apr/2026:15:37:12 +0800] "GET /style.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.82.72.103 - - [21/Apr/2026:15:37:12 +0800] "GET /wp-set.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.82.72.103 - - [21/Apr/2026:15:37:12 +0800] "GET /wp-setup.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.82.72.103 - - [21/Apr/2026:15:37:12 +0800] "GET /header.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.236 - - [21/Apr/2026:15:37:13 +0800] "GET /header.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.236 - - [21/Apr/2026:15:37:13 +0800] "GET /gecko.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.236 - - [21/Apr/2026:15:37:13 +0800] "GET /upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.236 - - [21/Apr/2026:15:37:14 +0800] "GET /init.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.236 - - [21/Apr/2026:15:37:14 +0800] "GET /wp-blog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.236 - - [21/Apr/2026:15:37:14 +0800] "GET /lock360.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.236 - - [21/Apr/2026:15:37:15 +0800] "GET /x.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.236 - - [21/Apr/2026:15:37:15 +0800] "GET /wp_info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.236 - - [21/Apr/2026:15:37:15 +0800] "GET /xml.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.236 - - [21/Apr/2026:15:37:15 +0800] "GET /by.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.236 - - [21/Apr/2026:15:37:16 +0800] "GET /default.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.236 - - [21/Apr/2026:15:37:16 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.236 - - [21/Apr/2026:15:37:16 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.236 - - [21/Apr/2026:15:37:16 +0800] "GET /cjfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.236 - - [21/Apr/2026:15:37:17 +0800] "GET /filefuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.236 - - [21/Apr/2026:15:37:17 +0800] "GET /thoms.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.236 - - [21/Apr/2026:15:37:17 +0800] "GET /postnews.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.236 - - [21/Apr/2026:15:37:18 +0800] "GET /media.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.236 - - [21/Apr/2026:15:37:18 +0800] "GET /dropdown.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.236 - - [21/Apr/2026:15:37:18 +0800] "GET /bs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.236 - - [21/Apr/2026:15:37:18 +0800] "GET /checkbox.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.236 - - [21/Apr/2026:15:37:19 +0800] "GET /export.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.236 - - [21/Apr/2026:15:37:19 +0800] "GET /privacy.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.236 - - [21/Apr/2026:15:37:19 +0800] "GET /tools.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.236 - - [21/Apr/2026:15:37:19 +0800] "GET /webdb.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.236 - - [21/Apr/2026:15:37:20 +0800] "GET /class.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.236 - - [21/Apr/2026:15:37:20 +0800] "GET /sts.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.236 - - [21/Apr/2026:15:37:20 +0800] "GET /st.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.236 - - [21/Apr/2026:15:37:21 +0800] "GET /GA13.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.236 - - [21/Apr/2026:15:37:21 +0800] "GET /cache/i/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.236 - - [21/Apr/2026:15:37:21 +0800] "GET /content.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.236 - - [21/Apr/2026:15:37:21 +0800] "GET /locks.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.234 - - [21/Apr/2026:15:37:22 +0800] "GET /js/edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.234 - - [21/Apr/2026:15:37:22 +0800] "GET /wp-themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.234 - - [21/Apr/2026:15:37:23 +0800] "GET /wp-uploads.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.234 - - [21/Apr/2026:15:37:23 +0800] "GET /wp-files.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.234 - - [21/Apr/2026:15:37:23 +0800] "GET /t.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.234 - - [21/Apr/2026:15:37:24 +0800] "GET /wp-load.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.234 - - [21/Apr/2026:15:37:24 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.234 - - [21/Apr/2026:15:37:24 +0800] "GET /xmrlpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.234 - - [21/Apr/2026:15:37:24 +0800] "GET /torsa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.234 - - [21/Apr/2026:15:37:25 +0800] "GET /wp-zx.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.234 - - [21/Apr/2026:15:37:25 +0800] "GET /gifclass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.234 - - [21/Apr/2026:15:37:25 +0800] "GET /fiyhxaae.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.234 - - [21/Apr/2026:15:37:25 +0800] "GET /gfd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.234 - - [21/Apr/2026:15:37:26 +0800] "GET /rh.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.234 - - [21/Apr/2026:15:37:26 +0800] "GET /wp-temp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.234 - - [21/Apr/2026:15:37:26 +0800] "GET /Okxob.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.234 - - [21/Apr/2026:15:37:27 +0800] "GET /x123x.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.234 - - [21/Apr/2026:15:37:27 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.236 - - [21/Apr/2026:15:37:22 +0800] "GET /js/edit.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.234 - - [21/Apr/2026:15:37:27 +0800] "GET /aaa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.234 - - [21/Apr/2026:15:37:28 +0800] "GET /eetu.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.234 - - [21/Apr/2026:15:37:28 +0800] "GET /zb_system/login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.234 - - [21/Apr/2026:15:37:28 +0800] "GET /finami.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.234 - - [21/Apr/2026:15:37:28 +0800] "GET /htto.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.234 - - [21/Apr/2026:15:37:29 +0800] "GET /options-head.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.234 - - [21/Apr/2026:15:37:29 +0800] "GET /rithin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.234 - - [21/Apr/2026:15:37:29 +0800] "GET /gettest.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.234 - - [21/Apr/2026:15:37:30 +0800] "GET /wefile.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.234 - - [21/Apr/2026:15:37:30 +0800] "GET /8xyz.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.234 - - [21/Apr/2026:15:37:30 +0800] "GET /css/xp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.234 - - [21/Apr/2026:15:37:30 +0800] "GET /tfm.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.234 - - [21/Apr/2026:15:37:31 +0800] "GET /asf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.234 - - [21/Apr/2026:15:37:31 +0800] "GET /.git/execute.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.221 - - [21/Apr/2026:15:37:31 +0800] "GET /update/da222.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.221 - - [21/Apr/2026:15:37:32 +0800] "GET /laravel/info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.221 - - [21/Apr/2026:15:37:32 +0800] "GET /bengi.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.221 - - [21/Apr/2026:15:37:32 +0800] "GET /0xD.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.221 - - [21/Apr/2026:15:37:32 +0800] "GET /wp-upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.221 - - [21/Apr/2026:15:37:33 +0800] "GET /ew.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.221 - - [21/Apr/2026:15:37:33 +0800] "GET /wp-aa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.221 - - [21/Apr/2026:15:37:33 +0800] "GET /wp-freya.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.221 - - [21/Apr/2026:15:37:41 +0800] "GET /wp-blogs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 213.35.109.170 - - [21/Apr/2026:15:37:41 +0800] "GET /file-manager/initialize HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 45.86.200.221 - - [21/Apr/2026:15:37:41 +0800] "GET /hplfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 213.35.109.170 - - [21/Apr/2026:15:37:41 +0800] "GET /file-manager/initialize HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 45.86.200.221 - - [21/Apr/2026:15:37:41 +0800] "GET /src_api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.221 - - [21/Apr/2026:15:37:42 +0800] "GET /aves.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.221 - - [21/Apr/2026:15:37:42 +0800] "GET /pf/rate.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.221 - - [21/Apr/2026:15:37:42 +0800] "GET /options-writing.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.221 - - [21/Apr/2026:15:37:42 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.221 - - [21/Apr/2026:15:37:43 +0800] "GET /vanda.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.221 - - [21/Apr/2026:15:37:43 +0800] "GET /clss.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.221 - - [21/Apr/2026:15:37:43 +0800] "GET /wk/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.221 - - [21/Apr/2026:15:37:43 +0800] "GET /torsa1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.221 - - [21/Apr/2026:15:37:44 +0800] "GET /wp-fclass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.221 - - [21/Apr/2026:15:37:44 +0800] "GET /wp-ccv.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.221 - - [21/Apr/2026:15:37:44 +0800] "GET /xoot.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.221 - - [21/Apr/2026:15:37:45 +0800] "GET /w-a.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.221 - - [21/Apr/2026:15:37:45 +0800] "GET /toine.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.221 - - [21/Apr/2026:15:37:45 +0800] "GET /fault.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.221 - - [21/Apr/2026:15:37:45 +0800] "GET /x2x.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.221 - - [21/Apr/2026:15:37:46 +0800] "GET /h02ugyh.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.221 - - [21/Apr/2026:15:37:46 +0800] "GET /ftp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.221 - - [21/Apr/2026:15:37:46 +0800] "GET /cache/core.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.221 - - [21/Apr/2026:15:37:47 +0800] "GET /wp-includes/IXR/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.237 - - [21/Apr/2026:15:37:47 +0800] "GET /wp-includes/js/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.214 - - [21/Apr/2026:15:37:48 +0800] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.214 - - [21/Apr/2026:15:37:48 +0800] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.231 - - [21/Apr/2026:15:37:48 +0800] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.245 - - [21/Apr/2026:15:37:49 +0800] "GET /wp-admin/images/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.245 - - [21/Apr/2026:15:37:49 +0800] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.217 - - [21/Apr/2026:15:37:50 +0800] "GET /wp-content/plugins/xt/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.217 - - [21/Apr/2026:15:37:50 +0800] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.217 - - [21/Apr/2026:15:37:50 +0800] "GET /wp-content/plugins/core/include.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.217 - - [21/Apr/2026:15:37:51 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.217 - - [21/Apr/2026:15:37:51 +0800] "GET /wp-includes/IXR/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.237 - - [21/Apr/2026:15:37:51 +0800] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.232 - - [21/Apr/2026:15:37:52 +0800] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.232 - - [21/Apr/2026:15:37:52 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.232 - - [21/Apr/2026:15:37:52 +0800] "GET /mah/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.232 - - [21/Apr/2026:15:37:53 +0800] "GET /wp-includes/Requests/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.244 - - [21/Apr/2026:15:37:53 +0800] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.244 - - [21/Apr/2026:15:37:54 +0800] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.244 - - [21/Apr/2026:15:37:54 +0800] "GET /wp-admin/images/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.244 - - [21/Apr/2026:15:37:54 +0800] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.244 - - [21/Apr/2026:15:37:54 +0800] "GET /wp-includes/css/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.82.72.103 - - [21/Apr/2026:15:37:55 +0800] "GET /wp-includes/fonts/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:37:56 +0800] "GET /wp-includes/Text/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.82.72.104 - - [21/Apr/2026:15:37:56 +0800] "GET /wp-includes/css/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.235 - - [21/Apr/2026:15:37:57 +0800] "GET /wp-content/themes/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.235 - - [21/Apr/2026:15:37:57 +0800] "GET /wp-content/plugins/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.235 - - [21/Apr/2026:15:37:57 +0800] "GET /filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.235 - - [21/Apr/2026:15:37:57 +0800] "GET /bk/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.235 - - [21/Apr/2026:15:37:58 +0800] "GET /css/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.235 - - [21/Apr/2026:15:37:58 +0800] "GET /files/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.235 - - [21/Apr/2026:15:37:58 +0800] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.235 - - [21/Apr/2026:15:37:59 +0800] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.235 - - [21/Apr/2026:15:37:59 +0800] "GET /wp-includes/blocks/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.232 - - [21/Apr/2026:15:37:59 +0800] "GET /wp-admin/classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.232 - - [21/Apr/2026:15:38:00 +0800] "GET /wp-admin/css/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.232 - - [21/Apr/2026:15:38:00 +0800] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.232 - - [21/Apr/2026:15:38:00 +0800] "GET /wp-admin/includes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.232 - - [21/Apr/2026:15:38:01 +0800] "GET /wp-includes/ID3/class-config.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.218 - - [21/Apr/2026:15:38:02 +0800] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.218 - - [21/Apr/2026:15:38:02 +0800] "GET /wp-admin/maint/go.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.218 - - [21/Apr/2026:15:38:03 +0800] "GET /wp-content/cong.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.218 - - [21/Apr/2026:15:38:03 +0800] "GET /wp-content/languages/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.218 - - [21/Apr/2026:15:38:03 +0800] "GET /wp-admin/maint/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.218 - - [21/Apr/2026:15:38:04 +0800] "GET /wp-content/upgrade/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.218 - - [21/Apr/2026:15:38:04 +0800] "GET /wp-admin/js/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.218 - - [21/Apr/2026:15:38:04 +0800] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.222 - - [21/Apr/2026:15:38:05 +0800] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.222 - - [21/Apr/2026:15:38:05 +0800] "GET /wp-admin/css/colors/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.222 - - [21/Apr/2026:15:38:05 +0800] "GET /wp-admin/includes/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.222 - - [21/Apr/2026:15:38:05 +0800] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.222 - - [21/Apr/2026:15:38:06 +0800] "GET /wp-includes/bak.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.239 - - [21/Apr/2026:15:38:06 +0800] "GET /wp-includes/images/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.228 - - [21/Apr/2026:15:38:07 +0800] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.228 - - [21/Apr/2026:15:38:07 +0800] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.228 - - [21/Apr/2026:15:38:07 +0800] "GET /wp-includes/customize/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.82.72.182 - - [21/Apr/2026:15:38:18 +0800] "GET /wp-content/plugins/xt/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.82.72.182 - - [21/Apr/2026:15:38:18 +0800] "GET /admin/controller/extension/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.82.72.182 - - [21/Apr/2026:15:38:19 +0800] "GET /wp-includes/block-supports/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.82.72.182 - - [21/Apr/2026:15:38:19 +0800] "GET /wp-content/plugins/content-management/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.82.72.182 - - [21/Apr/2026:15:38:19 +0800] "GET /wp-content/themes/Avada/licensing/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.82.72.182 - - [21/Apr/2026:15:38:20 +0800] "GET /Requests/Utility/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.82.72.182 - - [21/Apr/2026:15:38:20 +0800] "GET /themes/travelscape/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.82.72.182 - - [21/Apr/2026:15:38:20 +0800] "GET /themes/twentyseventeen/page/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.82.72.182 - - [21/Apr/2026:15:38:20 +0800] "GET /rest-api/fields/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.82.72.182 - - [21/Apr/2026:15:38:21 +0800] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.82.72.182 - - [21/Apr/2026:15:38:21 +0800] "GET /wp-content/plugins/tunnelforms/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.82.72.182 - - [21/Apr/2026:15:38:21 +0800] "GET /admin/fckeditor/editor/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.82.72.182 - - [21/Apr/2026:15:38:21 +0800] "GET /img/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.82.72.182 - - [21/Apr/2026:15:38:22 +0800] "GET /wp-content/plugins/masterx/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.82.72.182 - - [21/Apr/2026:15:38:22 +0800] "GET /tinyfilemanager/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.82.72.182 - - [21/Apr/2026:15:38:22 +0800] "GET /wp-content/plugins/watch/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.82.72.182 - - [21/Apr/2026:15:38:23 +0800] "GET /wp-content/languages/plugins/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.82.72.182 - - [21/Apr/2026:15:38:23 +0800] "GET /plugins/finder/categories/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.82.72.182 - - [21/Apr/2026:15:38:23 +0800] "GET /wp-includes/js/tinymce/skins/wordpress/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.82.72.182 - - [21/Apr/2026:15:38:24 +0800] "GET /bitrix/admin/htmleditor2/%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.82.72.182 - - [21/Apr/2026:15:38:24 +0800] "GET /wp-includes/js/tinymce/utils/%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.82.72.182 - - [21/Apr/2026:15:38:24 +0800] "GET /themes/seotheme/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.82.72.182 - - [21/Apr/2026:15:38:24 +0800] "GET /wp-includes/js/jquery/ui/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.82.72.182 - - [21/Apr/2026:15:38:25 +0800] "GET /js/tinymce/utils/%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.82.72.182 - - [21/Apr/2026:15:38:25 +0800] "GET /assets/js/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:38:25 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:25 +0800] "GET /Requests/Exception/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:25 +0800] "GET /gold.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:26 +0800] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:38:26 +0800] "GET /wp-load.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:26 +0800] "GET /wp-json/wp/v2/give_forms/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:26 +0800] "GET /77.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:26 +0800] "GET /wp-content/plugins/ultimate-member/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:38:26 +0800] "GET /.sghb.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:26 +0800] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:27 +0800] "GET /z3ki.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:27 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:27 +0800] "GET /zr-828.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:27 +0800] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.82.72.182 - - [21/Apr/2026:15:38:27 +0800] "GET /wp-links.php/wp-content/plugins/wp-content/uploa/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:27 +0800] "GET /uwa.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:28 +0800] "GET /wp-includes/js/plupload/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 20.216.157.30 - - [21/Apr/2026:15:38:28 +0800] "GET /ckk.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:28 +0800] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 20.216.157.30 - - [21/Apr/2026:15:38:28 +0800] "GET /pucci.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:28 +0800] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 20.216.157.30 - - [21/Apr/2026:15:38:28 +0800] "GET /wp-includes/blocks/details/ HTTP/1.1" 403 261 "-" "-" 20.216.157.30 - - [21/Apr/2026:15:38:28 +0800] "GET /.dj/index.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:28 +0800] "GET /wp-includes/images/wlw/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.82.72.182 - - [21/Apr/2026:15:38:29 +0800] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 20.216.157.30 - - [21/Apr/2026:15:38:29 +0800] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:29 +0800] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:29 +0800] "GET /.tmb/ HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:29 +0800] "GET /wp-includes/blocks/code/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 20.216.157.30 - - [21/Apr/2026:15:38:29 +0800] "GET /.admin.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:30 +0800] "GET /wp-includes/blocks/archives/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:30 +0800] "GET /sw.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:30 +0800] "GET /wp-includes/css/dist/components/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 20.216.157.30 - - [21/Apr/2026:15:38:30 +0800] "GET /vuln.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:30 +0800] "GET /wp-content/plugins/js-support-ticket/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 20.216.157.30 - - [21/Apr/2026:15:38:30 +0800] "GET /wp-temp.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:30 +0800] "GET /wp-content/plugins/easy-themes-manager/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:30 +0800] "GET /sxdfrt.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:31 +0800] "GET /wp-content/settings/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.82.72.182 - - [21/Apr/2026:15:38:31 +0800] "GET /wp-includes/blocks/pullquote/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:31 +0800] "GET /wp-content/themes/twentytwentyfive/assets/ HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:31 +0800] "GET /wp-includes/bk/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:31 +0800] "GET /wp-includes/blocks/buttons/ HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:32 +0800] "GET /wp-content/plugins/shell/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 20.216.157.30 - - [21/Apr/2026:15:38:32 +0800] "GET /class-bda.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:32 +0800] "GET /wp-admin/images/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:38:32 +0800] "GET /bhm.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:32 +0800] "GET /wp-includes/blocks/comments-pagination-numbers/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:32 +0800] "GET /xmu.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:32 +0800] "GET /wp-admin/user/interactivity-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 20.216.157.30 - - [21/Apr/2026:15:38:32 +0800] "GET /ref.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:33 +0800] "GET /wp-admin/css/colors/light/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:33 +0800] "GET /wp-xme.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:33 +0800] "GET /assets/bootstrap-fileupload/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:38:33 +0800] "GET /adminer.php HTTP/1.1" 403 261 "-" "-" 20.216.157.30 - - [21/Apr/2026:15:38:33 +0800] "GET /ktfow.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:33 +0800] "GET /wp-content/plugins/yanierin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:34 +0800] "GET /mode.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:34 +0800] "GET /wp-includes/l10n/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.82.72.182 - - [21/Apr/2026:15:38:34 +0800] "GET /wp-content/themes/hideo/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:38:34 +0800] "GET /Xx.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:34 +0800] "GET /wp-content/plugins/profile-builder/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 20.216.157.30 - - [21/Apr/2026:15:38:34 +0800] "GET /xmini.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:34 +0800] "GET /wp-content/plugins/plugin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:35 +0800] "GET /2468.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:35 +0800] "GET /wp-content/themes/travelscape/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:38:35 +0800] "GET //wp-admin/js/index.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:35 +0800] "GET /wp-admin/network/cache/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:35 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:35 +0800] "GET /wp-includes/blocks/details/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 20.216.157.30 - - [21/Apr/2026:15:38:35 +0800] "GET /amdin.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:36 +0800] "GET /wp-includes/blocks/post-terms/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:38:36 +0800] "GET /huya.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:36 +0800] "GET /wp-includes/theme-compat/network/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 20.216.157.30 - - [21/Apr/2026:15:38:36 +0800] "GET /puc.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:36 +0800] "GET /wp-includes/js/dist/development/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 20.216.157.30 - - [21/Apr/2026:15:38:36 +0800] "GET //themes.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:36 +0800] "GET /management1/assets/assets/images/gallery/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 20.216.157.30 - - [21/Apr/2026:15:38:37 +0800] "GET /ewp.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:37 +0800] "GET /management/assets/assets/css/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:38:37 +0800] "GET /kikikoko.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:37 +0800] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 20.216.157.30 - - [21/Apr/2026:15:38:37 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:37 +0800] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:38:37 +0800] "GET /xff.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:38 +0800] "GET /wordpress/wp-includes/blocks/accordion/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 20.216.157.30 - - [21/Apr/2026:15:38:38 +0800] "GET /lupo.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:38 +0800] "GET /assets/worders_front/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:38:38 +0800] "GET /awa.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:38 +0800] "GET /css/dmtixucz/golden-access/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.82.72.182 - - [21/Apr/2026:15:38:38 +0800] "GET /assets/jquery-ui/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:38 +0800] "GET /popo.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:39 +0800] "GET /admin/controller/extension/extension/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 20.216.157.30 - - [21/Apr/2026:15:38:39 +0800] "GET /13.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:39 +0800] "GET /wp-content/uploads/2024/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:39 +0800] "GET /11.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:39 +0800] "GET /wp-includes/Requests/library/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:39 +0800] "GET /p.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:40 +0800] "GET /wp-content/themes/Avada/includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:40 +0800] "GET //wp-includes/Requests/ HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:40 +0800] "GET /wp-content/uploads/fusion-forms/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 20.216.157.30 - - [21/Apr/2026:15:38:40 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:40 +0800] "GET /wp-content/themes/Avada/includes/lib/inc/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:40 +0800] "GET //shell.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:40 +0800] "GET /wp-content/themes/jupiter/framework/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:41 +0800] "GET /tea.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:41 +0800] "GET /wp-includes/blocks/site-title/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.82.72.182 - - [21/Apr/2026:15:38:41 +0800] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 20.216.157.30 - - [21/Apr/2026:15:38:41 +0800] "GET /seo.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:41 +0800] "GET /wp-content/plugins/jupiterx-core/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 20.216.157.30 - - [21/Apr/2026:15:38:41 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:42 +0800] "GET /wp-content/themes/Avada/shortcodes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 20.216.157.30 - - [21/Apr/2026:15:38:42 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:42 +0800] "GET /wp-json/bricks/v1/render_element/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:38:42 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:42 +0800] "GET /wp-content/themes/bricks/includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:38:42 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:42 +0800] "GET /wp-content/themes/service-finder/inc/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:43 +0800] "GET /3.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:43 +0800] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 20.216.157.30 - - [21/Apr/2026:15:38:43 +0800] "GET /4.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:43 +0800] "GET /wp-content/plugins/nupkc/configUGT/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:43 +0800] "GET /5.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:43 +0800] "GET /wp-content/themes/service-finder/admin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 20.216.157.30 - - [21/Apr/2026:15:38:43 +0800] "GET /6.php HTTP/1.1" 403 261 "-" "-" 20.216.157.30 - - [21/Apr/2026:15:38:44 +0800] "GET /9.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:44 +0800] "GET /wp-json/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 20.216.157.30 - - [21/Apr/2026:15:38:44 +0800] "GET /10.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:44 +0800] "GET /wp-json/wp/v2/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.82.72.182 - - [21/Apr/2026:15:38:44 +0800] "GET /wp-content/uploads/2025/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 20.216.157.30 - - [21/Apr/2026:15:38:44 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:44 +0800] "GET /wp-content/uploads/2026/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:38:45 +0800] "GET /.well-known/nastar.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:45 +0800] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 20.216.157.30 - - [21/Apr/2026:15:38:45 +0800] "GET /f35_S.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:45 +0800] "GET /wp-admin/js/widgets/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 20.216.157.30 - - [21/Apr/2026:15:38:45 +0800] "GET /2026w.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:45 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:45 +0800] "GET /111.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:46 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:46 +0800] "GET /wp1.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:46 +0800] "GET /wp-content/themes/tflow/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:46 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:46 +0800] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 20.216.157.30 - - [21/Apr/2026:15:38:46 +0800] "GET /byrgo.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:46 +0800] "GET /wp-admin/js/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:38:47 +0800] "GET //xwpg.php HTTP/1.1" 403 261 "-" "-" 185.82.72.182 - - [21/Apr/2026:15:38:47 +0800] "GET /ALFA_DATA/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:47 +0800] "GET /ass.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:47 +0800] "GET /wp-admin/css/colors/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:47 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:48 +0800] "GET /wp-includes/css/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:48 +0800] "GET /no18.php HTTP/1.1" 403 261 "-" "-" 20.216.157.30 - - [21/Apr/2026:15:38:48 +0800] "GET /fine.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:48 +0800] "GET /wp-includes/ID3/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:48 +0800] "GET /hplfuns.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:48 +0800] "GET /wp-includes/Requests/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:48 +0800] "GET /xa.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:48 +0800] "GET /wp-includes/blocks/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:38:49 +0800] "GET //admin.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:49 +0800] "GET /wp-includes/certificates/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.220 - - [21/Apr/2026:15:38:49 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:49 +0800] "GET /inege.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:49 +0800] "GET /wp-admin/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:49 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 20.216.157.30 - - [21/Apr/2026:15:38:50 +0800] "GET /uuu.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:50 +0800] "GET /wp-admin/maint/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 20.216.157.30 - - [21/Apr/2026:15:38:50 +0800] "GET /no1.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:50 +0800] "GET /wp-admin/meta/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 20.216.157.30 - - [21/Apr/2026:15:38:50 +0800] "GET /w2025.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:50 +0800] "GET /wp-admin/network/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.220 - - [21/Apr/2026:15:38:50 +0800] "GET /wp-admin/user/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:38:50 +0800] "GET /fvvff.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:51 +0800] "GET /wp-content/uploads/2021/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:51 +0800] "GET /a2.php HTTP/1.1" 403 261 "-" "-" 20.216.157.30 - - [21/Apr/2026:15:38:51 +0800] "GET //edit.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:51 +0800] "GET /wp-content/plugins/elementor/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:51 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:51 +0800] "GET /wp-content/mu-plugins/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:51 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:51 +0800] "GET /upload/image/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:52 +0800] "GET /66.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:52 +0800] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:52 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:52 +0800] "GET /wordpress/wp-includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 20.216.157.30 - - [21/Apr/2026:15:38:52 +0800] "GET /ol.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:52 +0800] "GET /blog/wp-includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 20.216.157.30 - - [21/Apr/2026:15:38:53 +0800] "GET //f6.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:53 +0800] "GET /sites/default/files/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 20.216.157.30 - - [21/Apr/2026:15:38:53 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:53 +0800] "GET /admin/images/slider/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 20.216.157.30 - - [21/Apr/2026:15:38:53 +0800] "GET /style.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:53 +0800] "GET /admin/tmp/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:53 +0800] "GET //av.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:53 +0800] "GET /admin/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:54 +0800] "GET /wp-admin/css/bolt.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:54 +0800] "GET /admin/uploads/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:38:54 +0800] "GET /wp-act.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:54 +0800] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:38:54 +0800] "GET /aaa.php?p= HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:54 +0800] "GET /assets/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 20.216.157.30 - - [21/Apr/2026:15:38:54 +0800] "GET /classwithtostring.php?p= HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:54 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:55 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:55 +0800] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.220 - - [21/Apr/2026:15:38:55 +0800] "GET /mt/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 20.216.157.30 - - [21/Apr/2026:15:38:55 +0800] "GET /sbhu.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:55 +0800] "GET /site/wp-includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:55 +0800] "GET /wp-blog.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:56 +0800] "GET /tmps/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 20.216.157.30 - - [21/Apr/2026:15:38:56 +0800] "GET //wp-includes/js/jquery/ HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:56 +0800] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:56 +0800] "GET //wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:56 +0800] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:56 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:56 +0800] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:56 +0800] "GET //adminfuns.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:57 +0800] "GET /wp-content/languages/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:38:57 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:57 +0800] "GET /wp-content/uploads/2022/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:38:57 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:57 +0800] "GET /wp-content/uploads/2023/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:38:57 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:57 +0800] "GET /wp-includes/wp-includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:57 +0800] "GET //cgi-bin/index.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:58 +0800] "GET /wp-includes/css/dist/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:58 +0800] "GET /fff.php HTTP/1.1" 403 261 "-" "-" 20.216.157.30 - - [21/Apr/2026:15:38:58 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:58 +0800] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 20.216.157.30 - - [21/Apr/2026:15:38:58 +0800] "GET /we.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:58 +0800] "GET /wp-includes/images/crystal/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:58 +0800] "GET /makeasmtp.php?p= HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:59 +0800] "GET /wp-includes/images/media/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:38:59 +0800] "GET //admin1.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:59 +0800] "GET /wp-includes/images/smilies/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:38:59 +0800] "GET //wp-includes/css/dist/ HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:59 +0800] "GET /wp-includes/js/codemirror/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 20.216.157.30 - - [21/Apr/2026:15:38:59 +0800] "GET /BDKR28WP.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:38:59 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 20.216.157.30 - - [21/Apr/2026:15:39:00 +0800] "GET //wp-includes/l10n/ HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:00 +0800] "GET /wp-includes/sitemaps/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:39:00 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:00 +0800] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 20.216.157.30 - - [21/Apr/2026:15:39:00 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:00 +0800] "GET /ubh/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:39:00 +0800] "GET /wp-admin/js/fi.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:00 +0800] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 20.216.157.30 - - [21/Apr/2026:15:39:01 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:01 +0800] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:39:01 +0800] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:01 +0800] "GET /wp-content/plugins/ubh/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:39:01 +0800] "GET /av.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:01 +0800] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 20.216.157.30 - - [21/Apr/2026:15:39:01 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:02 +0800] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 20.216.157.30 - - [21/Apr/2026:15:39:02 +0800] "GET /fi.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:02 +0800] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:39:02 +0800] "GET //a1.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:02 +0800] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 20.216.157.30 - - [21/Apr/2026:15:39:02 +0800] "GET /update/f35.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:02 +0800] "GET /wp-content/themes/alera/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 20.216.157.30 - - [21/Apr/2026:15:39:03 +0800] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 199 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:03 +0800] "GET /wp-content/themes/rishi/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.220 - - [21/Apr/2026:15:39:03 +0800] "GET /wp-content/themes/sketch/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.220 - - [21/Apr/2026:15:39:03 +0800] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:39:03 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:04 +0800] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 20.216.157.30 - - [21/Apr/2026:15:39:04 +0800] "GET //wp-includes/css/index.php?p= HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:04 +0800] "GET /wp-content/themes/pridmag/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:39:04 +0800] "GET /wp-includes/SimplePie/ HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:04 +0800] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 20.216.157.30 - - [21/Apr/2026:15:39:04 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:04 +0800] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:39:05 +0800] "GET /dev.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:05 +0800] "GET /up/.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 20.216.157.30 - - [21/Apr/2026:15:39:05 +0800] "GET /bal.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:05 +0800] "GET /wp-content/plugins/apikey/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:39:05 +0800] "GET /in.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:05 +0800] "GET /images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 20.216.157.30 - - [21/Apr/2026:15:39:05 +0800] "GET /gssdd.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:05 +0800] "GET /wp-admin/css/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:39:06 +0800] "GET //cgi-bin/admin.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:06 +0800] "GET /wp-includes/js/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:39:06 +0800] "GET /bs1.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:06 +0800] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:39:06 +0800] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:06 +0800] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 20.216.157.30 - - [21/Apr/2026:15:39:07 +0800] "GET /axx.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:07 +0800] "GET /wp-includes/IXR/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:39:07 +0800] "GET /alfashell.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:07 +0800] "GET /wp-includes/SimplePie/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:39:07 +0800] "GET /gettest.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:07 +0800] "GET /wp-includes/Text/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:39:07 +0800] "GET /acp.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:07 +0800] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.220 - - [21/Apr/2026:15:39:08 +0800] "GET /wp-includes/customize/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:39:08 +0800] "GET /file48.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:08 +0800] "GET /wp-includes/fonts/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:39:08 +0800] "GET /g.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:08 +0800] "GET /wp-includes/pomo/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 20.216.157.30 - - [21/Apr/2026:15:39:08 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:08 +0800] "GET /wp-includes/rest-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:39:08 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:09 +0800] "GET /wp-includes/widgets/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 20.216.157.30 - - [21/Apr/2026:15:39:09 +0800] "GET /ew.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:09 +0800] "GET /wp-content/plugins/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:39:09 +0800] "GET /file21.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:09 +0800] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 20.216.157.30 - - [21/Apr/2026:15:39:09 +0800] "GET /hypo.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:10 +0800] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 20.216.157.30 - - [21/Apr/2026:15:39:10 +0800] "GET /file18.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:10 +0800] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 20.216.157.30 - - [21/Apr/2026:15:39:10 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:10 +0800] "GET /wp-content/themes/seotheme/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 20.216.157.30 - - [21/Apr/2026:15:39:10 +0800] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:10 +0800] "GET /wp-content/plugins/core/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 20.216.157.30 - - [21/Apr/2026:15:39:10 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "-" 45.86.200.220 - - [21/Apr/2026:15:39:11 +0800] "GET /wp-content/plugins/Cache/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.220 - - [21/Apr/2026:15:39:11 +0800] "GET /wp-content/themes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.220 - - [21/Apr/2026:15:39:11 +0800] "GET /wp-includes/theme-compat/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.220 - - [21/Apr/2026:15:39:11 +0800] "GET /index/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.220 - - [21/Apr/2026:15:39:12 +0800] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.220 - - [21/Apr/2026:15:39:12 +0800] "GET /fonts/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.220 - - [21/Apr/2026:15:39:12 +0800] "GET /js/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.220 - - [21/Apr/2026:15:39:13 +0800] "GET /uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.220 - - [21/Apr/2026:15:39:13 +0800] "GET /wp-content/themes/digital-download/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.220 - - [21/Apr/2026:15:39:13 +0800] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.220 - - [21/Apr/2026:15:39:13 +0800] "GET /wp-content/plugins/seoo/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.220 - - [21/Apr/2026:15:39:14 +0800] "GET /wp-includes/assets/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.220 - - [21/Apr/2026:15:39:14 +0800] "GET /wp-includes/js/jcrop/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.220 - - [21/Apr/2026:15:39:14 +0800] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.220 - - [21/Apr/2026:15:39:14 +0800] "GET /wp-content/plugins/erin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.220 - - [21/Apr/2026:15:39:15 +0800] "GET /wp-content/maintenance/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.241 - - [21/Apr/2026:15:39:15 +0800] "GET /wp-content/x/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.241 - - [21/Apr/2026:15:39:15 +0800] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.241 - - [21/Apr/2026:15:39:16 +0800] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.241 - - [21/Apr/2026:15:39:16 +0800] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:16 +0800] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:17 +0800] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:17 +0800] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.241 - - [21/Apr/2026:15:39:17 +0800] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.241 - - [21/Apr/2026:15:39:17 +0800] "GET /.tmb/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.241 - - [21/Apr/2026:15:39:18 +0800] "GET /wp-content/plugins/fix/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:18 +0800] "GET /themes/pridmag/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:18 +0800] "GET /wp-includes/js/tinymce/plugins/paste/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.241 - - [21/Apr/2026:15:39:18 +0800] "GET /cache/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.241 - - [21/Apr/2026:15:39:19 +0800] "GET /filemanager/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.241 - - [21/Apr/2026:15:39:19 +0800] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:19 +0800] "GET /wp/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:20 +0800] "GET /wp-includes/js/tinymce/plugins/directionality/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:20 +0800] "GET /files/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.241 - - [21/Apr/2026:15:39:20 +0800] "GET /wp-includes/rest-api/search/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:20 +0800] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:21 +0800] "GET /wp-content/plugins/erin/yani/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:21 +0800] "GET /wp-includes/block-patterns/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:21 +0800] "GET /wp-content/themes/Avada/includes/lib/inc/fusion-app/assets/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:21 +0800] "GET /wp-includes/style-engine/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:22 +0800] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:22 +0800] "GET /wp-content/themes/twentytwentyone/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:22 +0800] "GET /wp-content/uploads-webpc/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.241 - - [21/Apr/2026:15:39:22 +0800] "GET /wp-content/plugins/simple/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:23 +0800] "GET /wp-includes/Requests/src/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:23 +0800] "GET /wp-content/themes/twenty/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:23 +0800] "GET /wp-content/plugins/elementor/modules/floating-buttons/classes/render/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.241 - - [21/Apr/2026:15:39:24 +0800] "GET /wp-content/themes/twentytwentytwo/templates/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:24 +0800] "GET /wp-admin/css/wp/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:24 +0800] "GET /backup/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:24 +0800] "GET /wp-content/plugins/wp-file-manager/lib/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.241 - - [21/Apr/2026:15:39:25 +0800] "GET /wp-includes/blocks/paragraph/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:25 +0800] "GET /wp-content/plugins/elementor/assets/js/packages/editor-app-bar/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.241 - - [21/Apr/2026:15:39:25 +0800] "GET /modules/mod_footer/tmpl/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:25 +0800] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:26 +0800] "GET /x/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.241 - - [21/Apr/2026:15:39:26 +0800] "GET /wp-content/plugins/olympus-google-fonts/assets/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.241 - - [21/Apr/2026:15:39:26 +0800] "GET /wp-includes/css/dist/nux/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.241 - - [21/Apr/2026:15:39:27 +0800] "GET /wp-content/themes/aahana/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:27 +0800] "GET /wp-includes/js/tinymce/plugins/lists/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.241 - - [21/Apr/2026:15:39:27 +0800] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.241 - - [21/Apr/2026:15:39:27 +0800] "GET /cn/wp-content/themes/twentytwentyone/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.241 - - [21/Apr/2026:15:39:28 +0800] "GET /wp-content/themes/evita/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.241 - - [21/Apr/2026:15:39:28 +0800] "GET /cgi-bin/cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:28 +0800] "GET /wp-content/ID3/img/img/block/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:28 +0800] "GET /themes/zMousse/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:29 +0800] "GET /wp-includes/SimplePie/Decode/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:29 +0800] "GET /includes/external/page/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:29 +0800] "GET /wordpress/wp-content/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:29 +0800] "GET /bk/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.241 - - [21/Apr/2026:15:39:30 +0800] "GET /modules/mod_ariimageslidersa/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:30 +0800] "GET /wp-content/plugins/background-image-cropper/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:30 +0800] "GET /wp-content/plugins/seox/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:31 +0800] "GET /wp-content/plugins/azra-tn/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:31 +0800] "GET /wp-includes/sodium_compat/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.241 - - [21/Apr/2026:15:39:31 +0800] "GET /wp-content/uploads/gravity_forms/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.241 - - [21/Apr/2026:15:39:31 +0800] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:32 +0800] "GET /wordpress/wp-content/themes/twentytwenty/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.241 - - [21/Apr/2026:15:39:32 +0800] "GET /wp-content/plugins/email-subscribers/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:32 +0800] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:32 +0800] "GET /wp-content/plugins/litespeed-cache/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:33 +0800] "GET /cgi_bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:33 +0800] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:33 +0800] "GET /wp-content/plugins/wp-catcher/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.241 - - [21/Apr/2026:15:39:33 +0800] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.241 - - [21/Apr/2026:15:39:34 +0800] "GET /wp-content/plugins/ioptimization/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.241 - - [21/Apr/2026:15:39:34 +0800] "GET /wp-content/plugins/rex/l/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:34 +0800] "GET /wordpress/wp-admin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.241 - - [21/Apr/2026:15:39:35 +0800] "GET /wordpress/wp-includes/style-engine/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.241 - - [21/Apr/2026:15:39:35 +0800] "GET /Files/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:35 +0800] "GET /wp-content/Files/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:35 +0800] "GET /wp-includes/Text/Files/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.241 - - [21/Apr/2026:15:39:36 +0800] "GET /wp-includes/Files/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.241 - - [21/Apr/2026:15:39:36 +0800] "GET /admin/Files/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:36 +0800] "GET /js/widgets/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.241 - - [21/Apr/2026:15:39:36 +0800] "GET /pki-validation/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.241 - - [21/Apr/2026:15:39:37 +0800] "GET /block-supports/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.241 - - [21/Apr/2026:15:39:37 +0800] "GET /pomo/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.241 - - [21/Apr/2026:15:39:37 +0800] "GET /css/colors/blue/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:37 +0800] "GET /js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.241 - - [21/Apr/2026:15:39:38 +0800] "GET /themes/scapeshot/includes/settings/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.241 - - [21/Apr/2026:15:39:38 +0800] "GET /uploads/2021/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:38 +0800] "GET /css/dist/editor/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.241 - - [21/Apr/2026:15:39:39 +0800] "GET /css/colors/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:39 +0800] "GET /images/crystal/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:39 +0800] "GET /js/plupload/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.241 - - [21/Apr/2026:15:39:42 +0800] "GET /maint/maint/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:42 +0800] "GET /Requests/Transport/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.241 - - [21/Apr/2026:15:39:42 +0800] "GET /phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:43 +0800] "GET /assets/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.241 - - [21/Apr/2026:15:39:43 +0800] "GET /themes/twenty/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.241 - - [21/Apr/2026:15:39:43 +0800] "GET /well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:44 +0800] "GET /uploads/2020/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.241 - - [21/Apr/2026:15:39:44 +0800] "GET /themes/rehub-theme/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.241 - - [21/Apr/2026:15:39:44 +0800] "GET /themes/fitnessbase/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:44 +0800] "GET /images/smilies/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.241 - - [21/Apr/2026:15:39:45 +0800] "GET /themes/calmly/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.238 - - [21/Apr/2026:15:39:45 +0800] "GET /php-compat/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.238 - - [21/Apr/2026:15:39:45 +0800] "GET /docs/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.238 - - [21/Apr/2026:15:39:46 +0800] "GET /images/media/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.238 - - [21/Apr/2026:15:39:46 +0800] "GET /tmp/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.238 - - [21/Apr/2026:15:39:46 +0800] "GET /local/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.238 - - [21/Apr/2026:15:39:47 +0800] "GET /js/jcrop/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.238 - - [21/Apr/2026:15:39:47 +0800] "GET /themes/alera/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.238 - - [21/Apr/2026:15:39:47 +0800] "GET /assets/js/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.238 - - [21/Apr/2026:15:39:47 +0800] "GET /themes/hello-element/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.238 - - [21/Apr/2026:15:39:48 +0800] "GET /blocks/audio/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.238 - - [21/Apr/2026:15:39:48 +0800] "GET /themes/finley/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.238 - - [21/Apr/2026:15:39:48 +0800] "GET /themes/twentytwenty/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.238 - - [21/Apr/2026:15:39:48 +0800] "GET /themes/wp-classic/inc/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.238 - - [21/Apr/2026:15:39:49 +0800] "GET /upload/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.238 - - [21/Apr/2026:15:39:49 +0800] "GET /js/tinymce/utils/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.238 - - [21/Apr/2026:15:39:49 +0800] "GET /.well-known/pkivalidation/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.238 - - [21/Apr/2026:15:39:50 +0800] "GET /xt/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.238 - - [21/Apr/2026:15:39:50 +0800] "GET /wp-content/uploads/stuff/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.238 - - [21/Apr/2026:15:39:50 +0800] "GET /wp-includes/abilities-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.238 - - [21/Apr/2026:15:39:50 +0800] "GET /wp-includes/js/jquery/wp/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.238 - - [21/Apr/2026:15:39:51 +0800] "GET /wp-includes/images/wlw/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.8.106.232 - - [21/Apr/2026:18:14:58 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 YaBrowser/19.6.2.594 (beta) Yowser/2.5 Safari/537.36" 34.171.97.41 - - [21/Apr/2026:20:47:47 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.171.97.41 - - [21/Apr/2026:20:47:48 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.171.97.41 - - [21/Apr/2026:20:47:48 +0800] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.171.97.41 - - [21/Apr/2026:20:47:48 +0800] "GET /xmlrpc.php?rsd HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.171.97.41 - - [21/Apr/2026:20:47:48 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.171.97.41 - - [21/Apr/2026:20:47:49 +0800] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.171.97.41 - - [21/Apr/2026:20:47:49 +0800] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.171.97.41 - - [21/Apr/2026:20:47:49 +0800] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.171.97.41 - - [21/Apr/2026:20:47:49 +0800] "GET /website/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.171.97.41 - - [21/Apr/2026:20:47:49 +0800] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.171.97.41 - - [21/Apr/2026:20:47:50 +0800] "GET /news/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.171.97.41 - - [21/Apr/2026:20:47:50 +0800] "GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.171.97.41 - - [21/Apr/2026:20:47:50 +0800] "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.171.97.41 - - [21/Apr/2026:20:47:50 +0800] "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.171.97.41 - - [21/Apr/2026:20:47:50 +0800] "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.171.97.41 - - [21/Apr/2026:20:47:51 +0800] "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.171.97.41 - - [21/Apr/2026:20:47:51 +0800] "GET /media/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.171.97.41 - - [21/Apr/2026:20:47:51 +0800] "GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.171.97.41 - - [21/Apr/2026:20:47:51 +0800] "GET /site/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.171.97.41 - - [21/Apr/2026:20:47:52 +0800] "GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.171.97.41 - - [21/Apr/2026:20:47:52 +0800] "GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.196.86.166 - - [21/Apr/2026:21:11:16 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 34.11.176.67 - - [21/Apr/2026:21:51:21 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 34.10.201.170 - - [21/Apr/2026:23:15:45 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 34.44.171.182 - - [21/Apr/2026:23:32:39 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 34.67.61.172 - - [21/Apr/2026:23:38:20 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 34.67.61.172 - - [21/Apr/2026:23:38:20 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 62.60.131.158 - - [22/Apr/2026:00:43:42 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 35.80.12.245 - - [22/Apr/2026:08:02:54 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)" 35.80.12.245 - - [22/Apr/2026:08:02:54 +0800] "GET /enhancecp HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)" 4.223.161.209 - - [22/Apr/2026:09:01:19 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:19 +0800] "GET /aboutc.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:20 +0800] "GET /new4.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:20 +0800] "GET /hroxw.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:20 +0800] "GET /wp-blogs.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:21 +0800] "GET /set.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:21 +0800] "GET /lib.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:21 +0800] "GET /public/vx.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:22 +0800] "GET /ws57.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:22 +0800] "GET /domains.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:23 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:23 +0800] "GET /166.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:23 +0800] "GET /term.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:24 +0800] "GET /666.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:24 +0800] "GET /tt.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:24 +0800] "GET /sid3.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:25 +0800] "GET /66.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:25 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:25 +0800] "GET /jga.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:25 +0800] "GET /wp-blog-header.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:26 +0800] "GET /bmi.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:26 +0800] "GET /byypas.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:26 +0800] "GET /wp-content/radio.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:27 +0800] "GET /wp-png.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:27 +0800] "GET /wen.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:27 +0800] "GET /plugin-install.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:27 +0800] "GET /ioxi001.PhP7 HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:28 +0800] "GET /wp-kikikoko.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:28 +0800] "GET /hplfuns.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:28 +0800] "GET /shell.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:29 +0800] "GET /new.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:29 +0800] "GET /wp-admin/network/edit.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:31 +0800] "GET /ws48.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:31 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:31 +0800] "GET /dass.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:32 +0800] "GET /wp-p2r3q9c8k4.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:32 +0800] "GET /ok.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:41 +0800] "GET /eetu.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:41 +0800] "GET /ws66.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:42 +0800] "GET /file61.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:42 +0800] "GET /asd.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:42 +0800] "GET /xx.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:42 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:43 +0800] "GET /cu.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:43 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:43 +0800] "GET /mh.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:44 +0800] "GET /Jcrop.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:44 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:45 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:45 +0800] "GET /bnm.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:45 +0800] "GET /ws80.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:45 +0800] "GET /wp-admin/network/users.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:46 +0800] "GET /s.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:47 +0800] "GET /tymn.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:48 +0800] "GET /wp-links-opml.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:48 +0800] "GET /wp5.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:48 +0800] "GET /ms.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:49 +0800] "GET /wp-access.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:49 +0800] "GET /wp-class-atom.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:49 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:49 +0800] "GET /press.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:50 +0800] "GET /900.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:50 +0800] "GET //wp-links-opml.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:50 +0800] "GET /jk.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:51 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:51 +0800] "GET /aa.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:51 +0800] "GET /mini.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:53 +0800] "GET /fs.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:53 +0800] "GET /mode.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:53 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:54 +0800] "GET /wp-block.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:54 +0800] "GET /ws88.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:55 +0800] "GET /adoms.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:55 +0800] "GET /plugin-editor.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:55 +0800] "GET /8573.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:56 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:56 +0800] "GET /t.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:57 +0800] "GET /wp-admin/css/bolt.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:57 +0800] "GET /profile.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:57 +0800] "GET /gaza.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:57 +0800] "GET /kj.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:58 +0800] "GET /aboute.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:58 +0800] "GET /ws82.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:58 +0800] "GET /edit.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:58 +0800] "GET /yw5bi63u.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:59 +0800] "GET /tool.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:59 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:01:59 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:02:00 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:02:00 +0800] "GET /mk.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:02:02 +0800] "GET /gettest.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:02:02 +0800] "GET /a4.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:02:02 +0800] "GET /retu11.PhP7 HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:02:02 +0800] "GET //rip.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:02:03 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:02:03 +0800] "GET /zoo.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:02:03 +0800] "GET /admlo.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:02:03 +0800] "GET /gcqoa.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:02:04 +0800] "GET /xxx.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:02:04 +0800] "GET /b.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:02:05 +0800] "GET /grsiuk.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:02:05 +0800] "GET /wp-class-api.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:02:06 +0800] "GET /bolt.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:02:06 +0800] "GET /gifclass.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:02:06 +0800] "GET /ccs.php HTTP/1.1" 403 261 "-" "-" 4.223.161.209 - - [22/Apr/2026:09:02:06 +0800] "GET /first.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:16 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:16 +0800] "GET /error.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:16 +0800] "GET /wp-load.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:17 +0800] "GET /77.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:17 +0800] "GET /.sghb.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:18 +0800] "GET /zoko.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:18 +0800] "GET /solo1.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:18 +0800] "GET /locales.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:19 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:19 +0800] "GET /pucci.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:20 +0800] "GET /wp-includes/blocks/details/ HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:20 +0800] "GET /.dj/index.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:21 +0800] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:21 +0800] "GET /.tmb/ HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:21 +0800] "GET /.admin.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:21 +0800] "GET /sw.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:22 +0800] "GET /vuln.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:22 +0800] "GET /wp-temp.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:22 +0800] "GET /sxdfrt.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:23 +0800] "GET /wp-content/themes/twentytwentyfive/assets/ HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:23 +0800] "GET /wp-includes/blocks/buttons/ HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:23 +0800] "GET /class-bda.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:24 +0800] "GET /bhm.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:24 +0800] "GET /xmu.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:24 +0800] "GET /ref.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:25 +0800] "GET /wp-xme.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:25 +0800] "GET /adminer.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:26 +0800] "GET /ktfow.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:26 +0800] "GET /mode.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:26 +0800] "GET /Xx.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:27 +0800] "GET /xmini.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:27 +0800] "GET /2468.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:27 +0800] "GET //wp-admin/js/index.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:28 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:28 +0800] "GET /amdin.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:28 +0800] "GET /huya.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:29 +0800] "GET /puc.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:29 +0800] "GET //themes.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:30 +0800] "GET /ewp.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:30 +0800] "GET /kikikoko.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:30 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:31 +0800] "GET /xff.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:31 +0800] "GET /lupo.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:31 +0800] "GET /awa.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:32 +0800] "GET /popo.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:32 +0800] "GET /13.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:32 +0800] "GET /11.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:33 +0800] "GET /p.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:33 +0800] "GET //wp-includes/Requests/ HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:33 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:34 +0800] "GET //shell.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:34 +0800] "GET /tea.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:35 +0800] "GET /seo.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:35 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:36 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:36 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:37 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:37 +0800] "GET /3.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:37 +0800] "GET /4.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:38 +0800] "GET /5.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:38 +0800] "GET /6.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:39 +0800] "GET /9.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:39 +0800] "GET /10.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:39 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:40 +0800] "GET /.well-known/nastar.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:40 +0800] "GET /f35_S.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:40 +0800] "GET /2026w.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:41 +0800] "GET /111.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:41 +0800] "GET /wp1.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:41 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:42 +0800] "GET /byrgo.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:43 +0800] "GET //xwpg.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:43 +0800] "GET /ass.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:43 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:44 +0800] "GET /no18.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:44 +0800] "GET /fine.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:44 +0800] "GET /hplfuns.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:45 +0800] "GET /xa.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:45 +0800] "GET //admin.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:45 +0800] "GET /inege.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:46 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:46 +0800] "GET /uuu.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:46 +0800] "GET /no1.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:47 +0800] "GET /w2025.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:47 +0800] "GET /fvvff.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:47 +0800] "GET /a2.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:48 +0800] "GET //edit.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:48 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:49 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:49 +0800] "GET /66.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:49 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:50 +0800] "GET /ol.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:50 +0800] "GET //f6.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:51 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:51 +0800] "GET /style.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:52 +0800] "GET //av.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:52 +0800] "GET /wp-admin/css/bolt.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:53 +0800] "GET /wp-act.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:53 +0800] "GET /aaa.php?p= HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:53 +0800] "GET /classwithtostring.php?p= HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:54 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:55 +0800] "GET /sbhu.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:55 +0800] "GET /wp-blog.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:55 +0800] "GET //wp-includes/js/jquery/ HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:56 +0800] "GET //wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:56 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:56 +0800] "GET //adminfuns.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:57 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:57 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:57 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:57 +0800] "GET //cgi-bin/index.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:58 +0800] "GET /fff.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:58 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:58 +0800] "GET /we.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:59 +0800] "GET /makeasmtp.php?p= HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:59 +0800] "GET //admin1.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:06:59 +0800] "GET //wp-includes/css/dist/ HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:00 +0800] "GET /BDKR28WP.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:00 +0800] "GET //wp-includes/l10n/ HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:00 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:01 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:01 +0800] "GET /wp-admin/js/fi.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:02 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:02 +0800] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:02 +0800] "GET /av.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:04 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:04 +0800] "GET /fi.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:05 +0800] "GET //a1.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:06 +0800] "GET /update/f35.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:06 +0800] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 199 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:07 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:08 +0800] "GET //wp-includes/css/index.php?p= HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:08 +0800] "GET /wp-includes/SimplePie/ HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:08 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:09 +0800] "GET /dev.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:09 +0800] "GET /bal.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:09 +0800] "GET /in.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:10 +0800] "GET /gssdd.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:10 +0800] "GET //cgi-bin/admin.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:11 +0800] "GET /bs1.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:12 +0800] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:12 +0800] "GET /axx.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:12 +0800] "GET /alfashell.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:13 +0800] "GET /gettest.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:13 +0800] "GET /acp.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:13 +0800] "GET /file48.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:13 +0800] "GET /g.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:14 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:14 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:16 +0800] "GET /ew.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:16 +0800] "GET /file21.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:16 +0800] "GET /hypo.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:17 +0800] "GET /file18.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:17 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:17 +0800] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 261 "-" "-" 20.215.249.149 - - [22/Apr/2026:18:07:17 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "-" 167.99.81.49 - - [22/Apr/2026:18:22:44 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 167.99.81.49 - - [22/Apr/2026:18:22:45 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "http://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 167.99.81.49 - - [22/Apr/2026:18:22:46 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 167.99.81.49 - - [22/Apr/2026:18:22:52 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "https://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 4.223.111.71 - - [22/Apr/2026:19:27:33 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:33 +0800] "GET /gpt-sh.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:34 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:34 +0800] "GET /aevly.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:34 +0800] "GET /ta0ol.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:35 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:35 +0800] "GET /users.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:35 +0800] "GET /public/vx.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:35 +0800] "GET /elp.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:36 +0800] "GET /zc-243.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:36 +0800] "GET /bkyac.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:36 +0800] "GET /wziar1.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:37 +0800] "GET /public/oLEzRVqmJJPFSucdefault.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:37 +0800] "GET /7logs.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:37 +0800] "GET /n3yUmQ6Q9xwQ8ocdefault.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:38 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:38 +0800] "GET /ctex1.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:39 +0800] "GET /lb.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:39 +0800] "GET /cilus.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:39 +0800] "GET /mh.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:40 +0800] "GET /fone1.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:40 +0800] "GET /auth.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:40 +0800] "GET /ortasekerli1.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:40 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:41 +0800] "GET /wp-png.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:41 +0800] "GET /tx79.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:41 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:42 +0800] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:42 +0800] "GET /bfil.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:42 +0800] "GET /abrand.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:42 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:43 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:43 +0800] "GET /amwxl.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:43 +0800] "GET /wmore1.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:44 +0800] "GET /userfuns.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:44 +0800] "GET /menu.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:44 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:44 +0800] "GET /saorix1.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:45 +0800] "GET /byypas.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:45 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:45 +0800] "GET /gptsh.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:46 +0800] "GET /0x.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:46 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:46 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:46 +0800] "GET /bolt.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:47 +0800] "GET /koiy.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:47 +0800] "GET /albin.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:47 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:48 +0800] "GET /sa.php7 HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:48 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:48 +0800] "GET /wp9.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:49 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:49 +0800] "GET /wp5.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:49 +0800] "GET /yuzuru1.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:49 +0800] "GET /file61.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:50 +0800] "GET /Cap.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:50 +0800] "GET /tfm.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:50 +0800] "GET /xper1.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:51 +0800] "GET /t00l.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:51 +0800] "GET /casp1.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:51 +0800] "GET /acc.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:52 +0800] "GET /asasx.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:52 +0800] "GET /xltt.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:52 +0800] "GET /packsin1.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:52 +0800] "GET /press.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:53 +0800] "GET /ws78.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:53 +0800] "GET /motu.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:53 +0800] "GET /hplfuns.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:54 +0800] "GET /xa.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:54 +0800] "GET /8573.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:54 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:54 +0800] "GET /666.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:55 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:55 +0800] "GET /prosellers8.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:55 +0800] "GET /shop.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:56 +0800] "GET /ww.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:56 +0800] "GET /fsjzs.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:56 +0800] "GET /cwclass.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:56 +0800] "GET /edit-tags.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:57 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:57 +0800] "GET /zoper1.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:57 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:58 +0800] "GET /ai.php HTTP/1.1" 403 261 "-" "-" 4.223.111.71 - - [22/Apr/2026:19:27:58 +0800] "GET /jga.php HTTP/1.1" 403 261 "-" "-" 45.150.174.91 - - [22/Apr/2026:22:53:15 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 45.150.174.91 - - [22/Apr/2026:22:53:15 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 45.150.174.91 - - [22/Apr/2026:22:53:16 +0800] "GET /administrator/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 160.30.179.120 - - [23/Apr/2026:00:15:59 +0800] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:83.0) Gecko/20100101 Firefox/83.0" 89.251.0.115 - - [23/Apr/2026:07:23:08 +0800] "GET /bless.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.115 - - [23/Apr/2026:07:23:08 +0800] "GET /O-Simple.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:23:08 +0800] "GET /lock360.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.115 - - [23/Apr/2026:07:23:09 +0800] "GET /zwso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:23:09 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:23:09 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:23:10 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:23:10 +0800] "GET /mah.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 89.251.0.115 - - [23/Apr/2026:07:23:10 +0800] "GET /.wp/wso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:23:11 +0800] "GET /core.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.115 - - [23/Apr/2026:07:23:11 +0800] "GET /robots.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:23:12 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.115 - - [23/Apr/2026:07:23:13 +0800] "GET /mini.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:23:13 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:23:13 +0800] "GET /file5.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:23:13 +0800] "GET /ahax.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.115 - - [23/Apr/2026:07:23:14 +0800] "GET /f35.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.143 - - [23/Apr/2026:07:23:14 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.143 - - [23/Apr/2026:07:23:15 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 89.251.0.143 - - [23/Apr/2026:07:23:15 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 89.251.0.143 - - [23/Apr/2026:07:23:15 +0800] "GET /update/f35.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.143 - - [23/Apr/2026:07:23:16 +0800] "GET /wp-content/hello.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.143 - - [23/Apr/2026:07:23:16 +0800] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.143 - - [23/Apr/2026:07:23:16 +0800] "GET /themes/zMousse/otuz1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 89.251.0.143 - - [23/Apr/2026:07:23:17 +0800] "GET /wp-content/edit-wolf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.143 - - [23/Apr/2026:07:23:17 +0800] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 89.251.0.143 - - [23/Apr/2026:07:23:17 +0800] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 89.251.0.143 - - [23/Apr/2026:07:23:18 +0800] "GET /images/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 89.251.0.143 - - [23/Apr/2026:07:23:18 +0800] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.143 - - [23/Apr/2026:07:23:18 +0800] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.143 - - [23/Apr/2026:07:23:19 +0800] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 89.251.0.143 - - [23/Apr/2026:07:23:19 +0800] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.143 - - [23/Apr/2026:07:23:19 +0800] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 89.251.0.143 - - [23/Apr/2026:07:23:20 +0800] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.116 - - [23/Apr/2026:07:23:21 +0800] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 89.251.0.116 - - [23/Apr/2026:07:23:21 +0800] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.116 - - [23/Apr/2026:07:23:21 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.116 - - [23/Apr/2026:07:23:22 +0800] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.129 - - [23/Apr/2026:07:23:22 +0800] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 89.251.0.129 - - [23/Apr/2026:07:23:22 +0800] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.129 - - [23/Apr/2026:07:23:23 +0800] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.129 - - [23/Apr/2026:07:23:23 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.129 - - [23/Apr/2026:07:23:23 +0800] "GET /uploads/94056-upload.phtml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.129 - - [23/Apr/2026:07:23:24 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 89.251.0.129 - - [23/Apr/2026:07:23:24 +0800] "GET /tinyfilemanager.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.147 - - [23/Apr/2026:07:23:25 +0800] "GET /js/bas.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.147 - - [23/Apr/2026:07:23:25 +0800] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 89.251.0.147 - - [23/Apr/2026:07:23:25 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.147 - - [23/Apr/2026:07:23:26 +0800] "GET /wp-includes/js/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.146 - - [23/Apr/2026:07:23:26 +0800] "GET /wp-content/upgrade/item.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.146 - - [23/Apr/2026:07:23:26 +0800] "GET /buy.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.146 - - [23/Apr/2026:07:23:27 +0800] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.146 - - [23/Apr/2026:07:23:27 +0800] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.146 - - [23/Apr/2026:07:23:27 +0800] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 89.251.0.146 - - [23/Apr/2026:07:23:28 +0800] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 89.251.0.146 - - [23/Apr/2026:07:23:28 +0800] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.150 - - [23/Apr/2026:07:23:29 +0800] "GET /admin/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.150 - - [23/Apr/2026:07:23:29 +0800] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.129 - - [23/Apr/2026:07:23:30 +0800] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.147 - - [23/Apr/2026:07:23:30 +0800] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.133 - - [23/Apr/2026:07:23:31 +0800] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.114 - - [23/Apr/2026:07:23:32 +0800] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.151 - - [23/Apr/2026:07:23:32 +0800] "GET /files/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.151 - - [23/Apr/2026:07:23:33 +0800] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.135 - - [23/Apr/2026:07:23:34 +0800] "GET /inc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 89.251.0.135 - - [23/Apr/2026:07:23:34 +0800] "GET /wp-content/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.135 - - [23/Apr/2026:07:23:34 +0800] "GET /filemanager.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:23:35 +0800] "GET /cgi-bin/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.113 - - [23/Apr/2026:07:23:36 +0800] "GET /cgi-bin/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.113 - - [23/Apr/2026:07:23:36 +0800] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.113 - - [23/Apr/2026:07:23:36 +0800] "GET /wp-includes/IXR/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.148 - - [23/Apr/2026:07:23:37 +0800] "GET /wp-admin/js/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.148 - - [23/Apr/2026:07:23:38 +0800] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:23:38 +0800] "GET /function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.138 - - [23/Apr/2026:07:23:39 +0800] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.132 - - [23/Apr/2026:07:23:39 +0800] "GET /wp-signup.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.132 - - [23/Apr/2026:07:23:39 +0800] "GET /wp-admin/network/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.132 - - [23/Apr/2026:07:23:40 +0800] "GET /admin/upload/css.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 89.251.0.132 - - [23/Apr/2026:07:23:40 +0800] "GET /wp-blog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.132 - - [23/Apr/2026:07:23:40 +0800] "GET /wp-admin/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.132 - - [23/Apr/2026:07:23:41 +0800] "GET /wp-content/plugins/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.132 - - [23/Apr/2026:07:23:41 +0800] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.121 - - [23/Apr/2026:07:23:42 +0800] "GET /wp-l0gin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.121 - - [23/Apr/2026:07:23:42 +0800] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.151 - - [23/Apr/2026:07:23:43 +0800] "GET /new.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.151 - - [23/Apr/2026:07:23:43 +0800] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.151 - - [23/Apr/2026:07:23:43 +0800] "GET /wp-includes/defaults.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.145 - - [23/Apr/2026:07:23:45 +0800] "GET /images/DJP9.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 89.251.0.145 - - [23/Apr/2026:07:23:45 +0800] "GET /wp-includes/customize/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.117 - - [23/Apr/2026:07:23:46 +0800] "GET /wp-admin/shell20211028.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 89.251.0.117 - - [23/Apr/2026:07:23:46 +0800] "GET /natural.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.117 - - [23/Apr/2026:07:23:47 +0800] "GET /item.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.117 - - [23/Apr/2026:07:23:47 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 89.251.0.117 - - [23/Apr/2026:07:23:47 +0800] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.137 - - [23/Apr/2026:07:23:48 +0800] "GET /wp-admin/images/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.137 - - [23/Apr/2026:07:23:48 +0800] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.139 - - [23/Apr/2026:07:23:49 +0800] "GET /about/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:23:49 +0800] "GET /wp-includes/Requests/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 89.251.0.126 - - [23/Apr/2026:07:23:50 +0800] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 89.251.0.145 - - [23/Apr/2026:07:23:51 +0800] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.121 - - [23/Apr/2026:07:23:51 +0800] "GET /wp-content/languages/404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.121 - - [23/Apr/2026:07:23:52 +0800] "GET /update/403.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 89.251.0.121 - - [23/Apr/2026:07:23:52 +0800] "GET /default.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.121 - - [23/Apr/2026:07:23:52 +0800] "GET /wp-includes/assets/info.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.141 - - [23/Apr/2026:07:23:53 +0800] "GET /wp-includes/class.api.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 89.251.0.114 - - [23/Apr/2026:07:23:54 +0800] "GET /wp-includes/fonts/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.144 - - [23/Apr/2026:07:23:54 +0800] "GET /wp-admin/chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.144 - - [23/Apr/2026:07:23:55 +0800] "GET /autoload_classmap/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.144 - - [23/Apr/2026:07:23:55 +0800] "GET /dropdown.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.144 - - [23/Apr/2026:07:23:55 +0800] "GET /images/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.144 - - [23/Apr/2026:07:23:56 +0800] "GET /db.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.144 - - [23/Apr/2026:07:23:56 +0800] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.144 - - [23/Apr/2026:07:23:56 +0800] "GET /mah/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.144 - - [23/Apr/2026:07:23:57 +0800] "GET /wp-content/plugins/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.144 - - [23/Apr/2026:07:23:57 +0800] "GET /wp-includes/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.123 - - [23/Apr/2026:07:23:58 +0800] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 89.251.0.123 - - [23/Apr/2026:07:23:58 +0800] "GET /wp-admin/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 89.251.0.123 - - [23/Apr/2026:07:23:58 +0800] "GET /templates/beez3/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.123 - - [23/Apr/2026:07:23:59 +0800] "GET /wp-admin/js/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.123 - - [23/Apr/2026:07:23:59 +0800] "GET /install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.123 - - [23/Apr/2026:07:24:00 +0800] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.123 - - [23/Apr/2026:07:24:01 +0800] "GET /images/class-config.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.123 - - [23/Apr/2026:07:24:01 +0800] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.123 - - [23/Apr/2026:07:24:01 +0800] "GET /templates/beez/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 89.251.0.123 - - [23/Apr/2026:07:24:02 +0800] "GET /bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.123 - - [23/Apr/2026:07:24:02 +0800] "GET /class.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.123 - - [23/Apr/2026:07:24:10 +0800] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.123 - - [23/Apr/2026:07:24:11 +0800] "GET /wp-content/product.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 89.251.0.123 - - [23/Apr/2026:07:24:11 +0800] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.123 - - [23/Apr/2026:07:24:11 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.123 - - [23/Apr/2026:07:24:12 +0800] "GET /wp-includes/rest-api/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.132 - - [23/Apr/2026:07:24:13 +0800] "GET /css/css.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 89.251.0.132 - - [23/Apr/2026:07:24:13 +0800] "GET /init.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 89.251.0.132 - - [23/Apr/2026:07:24:15 +0800] "GET /wp-admin/user/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.132 - - [23/Apr/2026:07:24:15 +0800] "GET /autoload_classmap/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.132 - - [23/Apr/2026:07:24:16 +0800] "GET /wp-includes/item.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.136 - - [23/Apr/2026:07:24:16 +0800] "GET /assets/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 89.251.0.136 - - [23/Apr/2026:07:24:17 +0800] "GET /.well-known/pki-validation/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.136 - - [23/Apr/2026:07:24:17 +0800] "GET /wp-content/uploads/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 89.251.0.136 - - [23/Apr/2026:07:24:17 +0800] "GET /css/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 89.251.0.136 - - [23/Apr/2026:07:24:18 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 89.251.0.136 - - [23/Apr/2026:07:24:18 +0800] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.136 - - [23/Apr/2026:07:24:18 +0800] "GET /wp_wlx.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.136 - - [23/Apr/2026:07:24:19 +0800] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 89.251.0.136 - - [23/Apr/2026:07:24:19 +0800] "GET /wp-includes/assets/husky301.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.131 - - [23/Apr/2026:07:24:20 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.131 - - [23/Apr/2026:07:24:20 +0800] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.131 - - [23/Apr/2026:07:24:22 +0800] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.138 - - [23/Apr/2026:07:24:22 +0800] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.145 - - [23/Apr/2026:07:24:23 +0800] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.145 - - [23/Apr/2026:07:24:24 +0800] "GET /wp-content/themes/chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 89.251.0.145 - - [23/Apr/2026:07:24:24 +0800] "GET /wp-header.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.145 - - [23/Apr/2026:07:24:24 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 89.251.0.145 - - [23/Apr/2026:07:24:25 +0800] "GET /Marvins.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 89.251.0.145 - - [23/Apr/2026:07:24:25 +0800] "GET /wp-content/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.145 - - [23/Apr/2026:07:24:25 +0800] "GET /wp-class.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.145 - - [23/Apr/2026:07:24:26 +0800] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:24:26 +0800] "GET /xx.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:24:27 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:24:27 +0800] "GET /wp-includes/classwithtostring.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.145 - - [23/Apr/2026:07:24:28 +0800] "GET /wp-content/blue.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.145 - - [23/Apr/2026:07:24:28 +0800] "GET /content.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.145 - - [23/Apr/2026:07:24:28 +0800] "GET /wp-content/uploads/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 89.251.0.145 - - [23/Apr/2026:07:24:29 +0800] "GET /wp-admin/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.131 - - [23/Apr/2026:07:24:29 +0800] "GET /wp-admin/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.131 - - [23/Apr/2026:07:24:30 +0800] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:24:37 +0800] "GET /wp-content/languages/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:24:38 +0800] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 89.251.0.115 - - [23/Apr/2026:07:24:38 +0800] "GET /wp-content/plugins/up/main.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:24:39 +0800] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 89.251.0.115 - - [23/Apr/2026:07:24:40 +0800] "GET /wp-admin/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.115 - - [23/Apr/2026:07:24:40 +0800] "GET /wp-admin/includes/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:24:40 +0800] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.115 - - [23/Apr/2026:07:24:41 +0800] "GET /images/images/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.115 - - [23/Apr/2026:07:24:41 +0800] "GET /images/class.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.115 - - [23/Apr/2026:07:24:41 +0800] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:24:42 +0800] "GET /web.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:24:42 +0800] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:24:42 +0800] "GET /images/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.115 - - [23/Apr/2026:07:24:43 +0800] "GET /wp-content/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:24:43 +0800] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.115 - - [23/Apr/2026:07:24:43 +0800] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:24:44 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.115 - - [23/Apr/2026:07:24:49 +0800] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.141 - - [23/Apr/2026:07:24:49 +0800] "GET /radio.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.141 - - [23/Apr/2026:07:24:50 +0800] "GET /wp-admin/mah.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 89.251.0.141 - - [23/Apr/2026:07:24:51 +0800] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.141 - - [23/Apr/2026:07:24:51 +0800] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.141 - - [23/Apr/2026:07:24:51 +0800] "GET /wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.141 - - [23/Apr/2026:07:24:51 +0800] "GET /wp-setup.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.141 - - [23/Apr/2026:07:24:52 +0800] "GET /ms-themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.141 - - [23/Apr/2026:07:24:52 +0800] "GET /wp-includes/assets/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.125 - - [23/Apr/2026:07:24:53 +0800] "GET /style.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 89.251.0.125 - - [23/Apr/2026:07:24:53 +0800] "GET /wp-includes/infi.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.119 - - [23/Apr/2026:07:24:54 +0800] "GET /wp-admin/maint/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.119 - - [23/Apr/2026:07:24:54 +0800] "GET /x.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.119 - - [23/Apr/2026:07:24:55 +0800] "GET /wp-includes/IXR/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.137 - - [23/Apr/2026:07:24:56 +0800] "GET /css/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.137 - - [23/Apr/2026:07:24:56 +0800] "GET /images/index22.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 89.251.0.137 - - [23/Apr/2026:07:24:56 +0800] "GET /wp-user.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 89.251.0.137 - - [23/Apr/2026:07:24:56 +0800] "GET /wp-includes/pomo/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.129 - - [23/Apr/2026:07:24:57 +0800] "GET /wp-includes/pomo/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.136 - - [23/Apr/2026:07:24:58 +0800] "GET /config.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.136 - - [23/Apr/2026:07:24:58 +0800] "GET /special.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.136 - - [23/Apr/2026:07:24:58 +0800] "GET /assets/script.js.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 89.251.0.136 - - [23/Apr/2026:07:24:59 +0800] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.136 - - [23/Apr/2026:07:24:59 +0800] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.136 - - [23/Apr/2026:07:24:59 +0800] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.126 - - [23/Apr/2026:07:25:00 +0800] "GET /wp-content/uploads/wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.126 - - [23/Apr/2026:07:25:00 +0800] "GET /wp-includes/certificates/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 89.251.0.146 - - [23/Apr/2026:07:25:01 +0800] "GET /cgi-bin/class.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 89.251.0.146 - - [23/Apr/2026:07:25:02 +0800] "GET /wp-content/cache/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.146 - - [23/Apr/2026:07:25:02 +0800] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.146 - - [23/Apr/2026:07:25:03 +0800] "GET /wp-includes/edit.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.139 - - [23/Apr/2026:07:25:03 +0800] "GET /webdb.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 89.251.0.139 - - [23/Apr/2026:07:25:04 +0800] "GET /assets/images/doc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:25:04 +0800] "GET /file2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.139 - - [23/Apr/2026:07:25:04 +0800] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.136 - - [23/Apr/2026:07:25:05 +0800] "GET /alfa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.136 - - [23/Apr/2026:07:25:05 +0800] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.136 - - [23/Apr/2026:07:25:06 +0800] "GET /wp-includes/click.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.114 - - [23/Apr/2026:07:25:06 +0800] "GET /.well-known/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 89.251.0.114 - - [23/Apr/2026:07:25:07 +0800] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 89.251.0.114 - - [23/Apr/2026:07:25:07 +0800] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.114 - - [23/Apr/2026:07:25:07 +0800] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 89.251.0.146 - - [23/Apr/2026:07:25:08 +0800] "GET /wp-admin/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.146 - - [23/Apr/2026:07:25:08 +0800] "GET /edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.146 - - [23/Apr/2026:07:25:09 +0800] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 89.251.0.146 - - [23/Apr/2026:07:25:09 +0800] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.146 - - [23/Apr/2026:07:25:09 +0800] "GET /wp-links-opml.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 89.251.0.146 - - [23/Apr/2026:07:25:10 +0800] "GET /wp-admin/user/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 89.251.0.146 - - [23/Apr/2026:07:25:10 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.146 - - [23/Apr/2026:07:25:10 +0800] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.148 - - [23/Apr/2026:07:25:11 +0800] "GET /wp-includes/xl2023.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.143 - - [23/Apr/2026:07:25:12 +0800] "GET /wp-includes/certificates/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.137 - - [23/Apr/2026:07:25:12 +0800] "GET /wp-includes/images/media/dog.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 89.251.0.151 - - [23/Apr/2026:07:25:13 +0800] "GET /xp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 89.251.0.151 - - [23/Apr/2026:07:25:13 +0800] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.117 - - [23/Apr/2026:07:25:14 +0800] "GET /wp-includes/assets/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:25:15 +0800] "GET /wp-links.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:25:15 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:25:16 +0800] "GET /wp-includes/css/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.146 - - [23/Apr/2026:07:25:16 +0800] "GET /wp-includes/ID3/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 89.251.0.117 - - [23/Apr/2026:07:25:17 +0800] "GET /wp-includes/pomo/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.126 - - [23/Apr/2026:07:25:18 +0800] "GET /wp-includes/IXR/security.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:25:19 +0800] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.120 - - [23/Apr/2026:07:25:20 +0800] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.151 - - [23/Apr/2026:07:25:20 +0800] "GET /wp-content/plugins/hello.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 89.251.0.151 - - [23/Apr/2026:07:25:21 +0800] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.151 - - [23/Apr/2026:07:25:21 +0800] "GET /wp-includes/fonts/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.116 - - [23/Apr/2026:07:25:22 +0800] "GET /moon.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.116 - - [23/Apr/2026:07:25:22 +0800] "GET /wp-admin/user/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.116 - - [23/Apr/2026:07:25:22 +0800] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 89.251.0.116 - - [23/Apr/2026:07:25:23 +0800] "GET /webadmin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 89.251.0.116 - - [23/Apr/2026:07:25:23 +0800] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.119 - - [23/Apr/2026:07:25:24 +0800] "GET /wp-admin/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.119 - - [23/Apr/2026:07:25:24 +0800] "GET /xl2023.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.119 - - [23/Apr/2026:07:25:24 +0800] "GET /go.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 89.251.0.119 - - [23/Apr/2026:07:25:25 +0800] "GET /wp-admin/xleet.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.119 - - [23/Apr/2026:07:25:25 +0800] "GET /templates/beez3/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 89.251.0.119 - - [23/Apr/2026:07:25:25 +0800] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.119 - - [23/Apr/2026:07:25:26 +0800] "GET /.well-known/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 89.251.0.119 - - [23/Apr/2026:07:25:26 +0800] "GET /wp-includes/assets/file.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.123 - - [23/Apr/2026:07:25:27 +0800] "GET /cgi-bin/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.123 - - [23/Apr/2026:07:25:27 +0800] "GET /wp-content/uploads/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.123 - - [23/Apr/2026:07:25:27 +0800] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 89.251.0.123 - - [23/Apr/2026:07:25:28 +0800] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.113 - - [23/Apr/2026:07:25:28 +0800] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 89.251.0.123 - - [23/Apr/2026:07:25:29 +0800] "GET /wp-admin/css/colors/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.123 - - [23/Apr/2026:07:25:29 +0800] "GET /warm.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 89.251.0.123 - - [23/Apr/2026:07:25:30 +0800] "GET /wp-admin/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.123 - - [23/Apr/2026:07:25:31 +0800] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.123 - - [23/Apr/2026:07:25:31 +0800] "GET /wp-includes/images/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.119 - - [23/Apr/2026:07:25:32 +0800] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.119 - - [23/Apr/2026:07:25:33 +0800] "GET /blog/wp-content/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.119 - - [23/Apr/2026:07:25:33 +0800] "GET /hehehehe.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.119 - - [23/Apr/2026:07:25:33 +0800] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.119 - - [23/Apr/2026:07:25:34 +0800] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 89.251.0.119 - - [23/Apr/2026:07:25:34 +0800] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 89.251.0.119 - - [23/Apr/2026:07:25:34 +0800] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.119 - - [23/Apr/2026:07:25:35 +0800] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 89.251.0.119 - - [23/Apr/2026:07:25:35 +0800] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 89.251.0.119 - - [23/Apr/2026:07:25:35 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.119 - - [23/Apr/2026:07:25:36 +0800] "GET /wp-includes/Requests/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 89.251.0.140 - - [23/Apr/2026:07:25:36 +0800] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.132 - - [23/Apr/2026:07:25:37 +0800] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.132 - - [23/Apr/2026:07:25:38 +0800] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:25:38 +0800] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.117 - - [23/Apr/2026:07:25:41 +0800] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.136 - - [23/Apr/2026:07:25:41 +0800] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 89.251.0.136 - - [23/Apr/2026:07:25:42 +0800] "GET /wp-includes/images/media/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.143 - - [23/Apr/2026:07:25:42 +0800] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 89.251.0.144 - - [23/Apr/2026:07:25:43 +0800] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 89.251.0.125 - - [23/Apr/2026:07:25:44 +0800] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.135 - - [23/Apr/2026:07:25:44 +0800] "GET /wp-admin/maint/themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 89.251.0.135 - - [23/Apr/2026:07:25:45 +0800] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.135 - - [23/Apr/2026:07:25:45 +0800] "GET /wp-includes/fonts/themes.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 89.251.0.116 - - [23/Apr/2026:07:25:46 +0800] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.116 - - [23/Apr/2026:07:25:46 +0800] "GET /wp-includes/certificates/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 89.251.0.145 - - [23/Apr/2026:07:25:46 +0800] "GET /byp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.145 - - [23/Apr/2026:07:25:47 +0800] "GET /blog/wp-includes/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.145 - - [23/Apr/2026:07:25:47 +0800] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 89.251.0.135 - - [23/Apr/2026:07:25:48 +0800] "GET /blog/wp-admin/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 89.251.0.135 - - [23/Apr/2026:07:25:48 +0800] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 89.251.0.135 - - [23/Apr/2026:07:25:48 +0800] "GET /wp-includes/css/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.125 - - [23/Apr/2026:07:25:49 +0800] "GET /cgi-bin/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.125 - - [23/Apr/2026:07:25:49 +0800] "GET /wp-content/wso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.125 - - [23/Apr/2026:07:25:50 +0800] "GET /class.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 89.251.0.125 - - [23/Apr/2026:07:25:50 +0800] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 89.251.0.141 - - [23/Apr/2026:07:25:51 +0800] "GET /wp-content/radio.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 89.251.0.141 - - [23/Apr/2026:07:25:51 +0800] "GET /system_log.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.141 - - [23/Apr/2026:07:25:52 +0800] "GET /.alf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.141 - - [23/Apr/2026:07:25:52 +0800] "GET /wso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.141 - - [23/Apr/2026:07:25:52 +0800] "GET /wp-includes/blocks/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.148 - - [23/Apr/2026:07:25:53 +0800] "GET /flower.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.148 - - [23/Apr/2026:07:25:53 +0800] "GET /wp-includes/wp-class.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.127 - - [23/Apr/2026:07:25:54 +0800] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 89.251.0.127 - - [23/Apr/2026:07:25:54 +0800] "GET /wp-content/1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 89.251.0.127 - - [23/Apr/2026:07:25:54 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.127 - - [23/Apr/2026:07:25:55 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.127 - - [23/Apr/2026:07:25:55 +0800] "GET /setup.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.127 - - [23/Apr/2026:07:25:55 +0800] "GET /.bod/.ll/ss.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.127 - - [23/Apr/2026:07:25:56 +0800] "GET /.well-known/radio.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.127 - - [23/Apr/2026:07:25:56 +0800] "GET /wp-content/plugin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.127 - - [23/Apr/2026:07:25:56 +0800] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.127 - - [23/Apr/2026:07:25:57 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.127 - - [23/Apr/2026:07:25:57 +0800] "GET /cc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 89.251.0.127 - - [23/Apr/2026:07:25:57 +0800] "GET /.well-known/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.127 - - [23/Apr/2026:07:25:58 +0800] "GET /ab.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.127 - - [23/Apr/2026:07:25:58 +0800] "GET /wp-content/themes/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.127 - - [23/Apr/2026:07:25:58 +0800] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.127 - - [23/Apr/2026:07:25:59 +0800] "GET /doc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.127 - - [23/Apr/2026:07:25:59 +0800] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.124 - - [23/Apr/2026:07:25:59 +0800] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 89.251.0.123 - - [23/Apr/2026:07:26:01 +0800] "GET /mar.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.123 - - [23/Apr/2026:07:26:02 +0800] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 89.251.0.135 - - [23/Apr/2026:07:26:02 +0800] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 89.251.0.135 - - [23/Apr/2026:07:26:03 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.135 - - [23/Apr/2026:07:26:03 +0800] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.133 - - [23/Apr/2026:07:26:03 +0800] "GET /wp-includes/style-engine/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.113 - - [23/Apr/2026:07:26:04 +0800] "GET /js/fm.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 89.251.0.113 - - [23/Apr/2026:07:26:05 +0800] "GET /wp-admin/images/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.113 - - [23/Apr/2026:07:26:05 +0800] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.113 - - [23/Apr/2026:07:26:05 +0800] "GET /wp-content/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.113 - - [23/Apr/2026:07:26:05 +0800] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.146 - - [23/Apr/2026:07:26:06 +0800] "GET /fm.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.138 - - [23/Apr/2026:07:26:07 +0800] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:26:07 +0800] "GET /adminfuns.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 89.251.0.138 - - [23/Apr/2026:07:26:08 +0800] "GET /wp-admin/images/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:26:08 +0800] "GET /ini.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.138 - - [23/Apr/2026:07:26:08 +0800] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:26:08 +0800] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 89.251.0.142 - - [23/Apr/2026:07:26:09 +0800] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 89.251.0.142 - - [23/Apr/2026:07:26:09 +0800] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.142 - - [23/Apr/2026:07:26:10 +0800] "GET /wp-admin/js/instaall.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.142 - - [23/Apr/2026:07:26:10 +0800] "GET /wp-includes/function.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.116 - - [23/Apr/2026:07:26:11 +0800] "GET /wp-includes/plugins.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.151 - - [23/Apr/2026:07:26:11 +0800] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 89.251.0.151 - - [23/Apr/2026:07:26:12 +0800] "GET /wp-content.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.151 - - [23/Apr/2026:07:26:12 +0800] "GET /wp-includes/css/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.113 - - [23/Apr/2026:07:26:13 +0800] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.115 - - [23/Apr/2026:07:26:13 +0800] "GET /wp-admin/network/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:26:14 +0800] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.115 - - [23/Apr/2026:07:26:14 +0800] "GET /customize.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:26:14 +0800] "GET /license.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:26:15 +0800] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:26:15 +0800] "GET /lock.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.115 - - [23/Apr/2026:07:26:15 +0800] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:26:16 +0800] "GET /wp-includes/atomlib.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 89.251.0.151 - - [23/Apr/2026:07:26:16 +0800] "GET /wp-includes/rest-api/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.147 - - [23/Apr/2026:07:26:17 +0800] "GET /.well-known/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.147 - - [23/Apr/2026:07:26:17 +0800] "GET /.well-known/wincust.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 89.251.0.147 - - [23/Apr/2026:07:26:17 +0800] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.147 - - [23/Apr/2026:07:26:18 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.147 - - [23/Apr/2026:07:26:18 +0800] "GET /wp-includes/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.151 - - [23/Apr/2026:07:26:19 +0800] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.114 - - [23/Apr/2026:07:26:19 +0800] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.131 - - [23/Apr/2026:07:26:20 +0800] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.131 - - [23/Apr/2026:07:26:20 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.131 - - [23/Apr/2026:07:26:21 +0800] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.131 - - [23/Apr/2026:07:26:21 +0800] "GET /fonts/database.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 89.251.0.131 - - [23/Apr/2026:07:26:21 +0800] "GET /ff2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.131 - - [23/Apr/2026:07:26:21 +0800] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 89.251.0.121 - - [23/Apr/2026:07:26:22 +0800] "GET /wp-admin/plugin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 89.251.0.121 - - [23/Apr/2026:07:26:23 +0800] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 89.251.0.138 - - [23/Apr/2026:07:26:23 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 89.251.0.138 - - [23/Apr/2026:07:26:24 +0800] "GET /wp-atom.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:26:24 +0800] "GET /wp-admin/css/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:26:24 +0800] "GET /up.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.138 - - [23/Apr/2026:07:26:25 +0800] "GET /wp-content/uploads/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:26:25 +0800] "GET /assets/images/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:26:25 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:26:25 +0800] "GET /js/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 89.251.0.138 - - [23/Apr/2026:07:26:26 +0800] "GET /simple/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:26:26 +0800] "GET /worm.PhP HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.138 - - [23/Apr/2026:07:26:26 +0800] "GET /ext.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 89.251.0.138 - - [23/Apr/2026:07:26:27 +0800] "GET /delpaths.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:26:27 +0800] "GET /.well-known/pki-validation/1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:26:27 +0800] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:26:28 +0800] "GET /.well-known/pki-validation/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:26:28 +0800] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.138 - - [23/Apr/2026:07:26:28 +0800] "GET /gifclass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:26:28 +0800] "GET /plugin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 89.251.0.138 - - [23/Apr/2026:07:26:29 +0800] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.138 - - [23/Apr/2026:07:26:29 +0800] "GET /update-core.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:26:29 +0800] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 89.251.0.138 - - [23/Apr/2026:07:26:30 +0800] "GET /wp-mail.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:26:30 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:26:30 +0800] "GET /wp-admin/defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:26:31 +0800] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 89.251.0.138 - - [23/Apr/2026:07:26:31 +0800] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.138 - - [23/Apr/2026:07:26:31 +0800] "GET /wp-admin/maint/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:26:32 +0800] "GET /wp-admin/js/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:26:32 +0800] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 89.251.0.138 - - [23/Apr/2026:07:26:32 +0800] "GET /wp-admin/maint/maint.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:26:33 +0800] "GET /assets/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 89.251.0.138 - - [23/Apr/2026:07:26:33 +0800] "GET /aa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:26:34 +0800] "GET /index2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.138 - - [23/Apr/2026:07:26:34 +0800] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 89.251.0.138 - - [23/Apr/2026:07:26:35 +0800] "GET /wp-admin/network/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:26:35 +0800] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:26:35 +0800] "GET /wp-content/languages/plugins.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 89.251.0.138 - - [23/Apr/2026:07:26:36 +0800] "GET /shell.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.138 - - [23/Apr/2026:07:26:36 +0800] "GET /.well-known/content.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:26:36 +0800] "GET /wp-includes/Text/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 89.251.0.134 - - [23/Apr/2026:07:26:37 +0800] "GET /wp-admin/network/atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.134 - - [23/Apr/2026:07:26:37 +0800] "GET /.well-known/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.134 - - [23/Apr/2026:07:26:38 +0800] "GET /hehe.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.134 - - [23/Apr/2026:07:26:38 +0800] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.151 - - [23/Apr/2026:07:26:39 +0800] "GET /css/slider.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.151 - - [23/Apr/2026:07:26:39 +0800] "GET /dir.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.151 - - [23/Apr/2026:07:26:39 +0800] "GET /wp-includes/css/atomlib.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.124 - - [23/Apr/2026:07:26:40 +0800] "GET /wp-content/style.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.142 - - [23/Apr/2026:07:26:40 +0800] "GET /wp-content/style.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.142 - - [23/Apr/2026:07:26:41 +0800] "GET /libraries/phpmailer/updates.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.142 - - [23/Apr/2026:07:26:41 +0800] "GET /nf_tracking.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.142 - - [23/Apr/2026:07:26:41 +0800] "GET /wp-admin/css/about.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.142 - - [23/Apr/2026:07:26:42 +0800] "GET /filefuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.142 - - [23/Apr/2026:07:26:42 +0800] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 89.251.0.142 - - [23/Apr/2026:07:26:42 +0800] "GET /l.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 89.251.0.142 - - [23/Apr/2026:07:26:43 +0800] "GET /repeater.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.128 - - [23/Apr/2026:07:26:43 +0800] "GET /repeater.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.128 - - [23/Apr/2026:07:26:44 +0800] "GET /wp-admin/wso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.128 - - [23/Apr/2026:07:26:44 +0800] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.148 - - [23/Apr/2026:07:26:45 +0800] "GET /contacts.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.148 - - [23/Apr/2026:07:26:45 +0800] "GET /wsa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.148 - - [23/Apr/2026:07:26:45 +0800] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 89.251.0.135 - - [23/Apr/2026:07:26:46 +0800] "GET /firewall.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.135 - - [23/Apr/2026:07:26:46 +0800] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.131 - - [23/Apr/2026:07:26:47 +0800] "GET /wp-content/uploads/content.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.131 - - [23/Apr/2026:07:26:47 +0800] "GET /lv.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 89.251.0.131 - - [23/Apr/2026:07:26:47 +0800] "GET /images/js1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.131 - - [23/Apr/2026:07:26:48 +0800] "GET /wp-admin/maint/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.131 - - [23/Apr/2026:07:26:48 +0800] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.131 - - [23/Apr/2026:07:26:48 +0800] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.131 - - [23/Apr/2026:07:26:49 +0800] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.144 - - [23/Apr/2026:07:26:49 +0800] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 89.251.0.141 - - [23/Apr/2026:07:26:50 +0800] "GET /wp-admin/theme-editor.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 89.251.0.141 - - [23/Apr/2026:07:26:50 +0800] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 89.251.0.141 - - [23/Apr/2026:07:26:50 +0800] "GET /wp-admin/maint/wonder.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 89.251.0.141 - - [23/Apr/2026:07:26:51 +0800] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.141 - - [23/Apr/2026:07:26:51 +0800] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 89.251.0.141 - - [23/Apr/2026:07:26:51 +0800] "GET /tox.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.141 - - [23/Apr/2026:07:26:52 +0800] "GET /wp-content/languages/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.141 - - [23/Apr/2026:07:26:52 +0800] "GET /wp-includes/js/dist/default.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.131 - - [23/Apr/2026:07:26:53 +0800] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.131 - - [23/Apr/2026:07:26:53 +0800] "GET /tiny.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 89.251.0.136 - - [23/Apr/2026:07:26:54 +0800] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.136 - - [23/Apr/2026:07:26:54 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.136 - - [23/Apr/2026:07:26:54 +0800] "GET /wp-themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 89.251.0.136 - - [23/Apr/2026:07:26:55 +0800] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.124 - - [23/Apr/2026:07:26:56 +0800] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 89.251.0.124 - - [23/Apr/2026:07:26:56 +0800] "GET /mariju.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.124 - - [23/Apr/2026:07:26:56 +0800] "GET /waf_defender.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.124 - - [23/Apr/2026:07:26:57 +0800] "GET /wp-admin/maint/cong.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 89.251.0.124 - - [23/Apr/2026:07:26:57 +0800] "GET /av.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.124 - - [23/Apr/2026:07:26:57 +0800] "GET /wp-admin/css/glex.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.124 - - [23/Apr/2026:07:26:58 +0800] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.124 - - [23/Apr/2026:07:26:58 +0800] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 89.251.0.116 - - [23/Apr/2026:07:26:59 +0800] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.116 - - [23/Apr/2026:07:26:59 +0800] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 89.251.0.116 - - [23/Apr/2026:07:26:59 +0800] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.116 - - [23/Apr/2026:07:27:00 +0800] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.144 - - [23/Apr/2026:07:27:00 +0800] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 89.251.0.144 - - [23/Apr/2026:07:27:01 +0800] "GET /theme.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.144 - - [23/Apr/2026:07:27:01 +0800] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 89.251.0.144 - - [23/Apr/2026:07:27:01 +0800] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.144 - - [23/Apr/2026:07:27:02 +0800] "GET /Simple.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.144 - - [23/Apr/2026:07:27:02 +0800] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.144 - - [23/Apr/2026:07:27:02 +0800] "GET /wp-admin/1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.144 - - [23/Apr/2026:07:27:03 +0800] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 89.251.0.144 - - [23/Apr/2026:07:27:03 +0800] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 89.251.0.144 - - [23/Apr/2026:07:27:03 +0800] "GET /.well-known/classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 89.251.0.144 - - [23/Apr/2026:07:27:04 +0800] "GET /css/av.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 89.251.0.144 - - [23/Apr/2026:07:27:04 +0800] "GET /images/waf_defender.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 89.251.0.144 - - [23/Apr/2026:07:27:04 +0800] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.129 - - [23/Apr/2026:07:27:05 +0800] "GET /small.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.123 - - [23/Apr/2026:07:27:06 +0800] "GET /small.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.123 - - [23/Apr/2026:07:27:06 +0800] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.146 - - [23/Apr/2026:07:27:07 +0800] "GET /NewFile.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 89.251.0.146 - - [23/Apr/2026:07:27:07 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.146 - - [23/Apr/2026:07:27:07 +0800] "GET /error.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.146 - - [23/Apr/2026:07:27:07 +0800] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.146 - - [23/Apr/2026:07:27:08 +0800] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:27:08 +0800] "GET /wp-content/languages/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 89.251.0.120 - - [23/Apr/2026:07:27:09 +0800] "GET /wp-files.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:27:09 +0800] "GET /functions.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.120 - - [23/Apr/2026:07:27:10 +0800] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.141 - - [23/Apr/2026:07:27:11 +0800] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 89.251.0.126 - - [23/Apr/2026:07:27:11 +0800] "GET /aks.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.126 - - [23/Apr/2026:07:27:12 +0800] "GET /litespeed.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 89.251.0.126 - - [23/Apr/2026:07:27:12 +0800] "GET /img/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 89.251.0.126 - - [23/Apr/2026:07:27:12 +0800] "GET /wp-includes/class-feed-index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 89.251.0.147 - - [23/Apr/2026:07:27:13 +0800] "GET /wpn.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.147 - - [23/Apr/2026:07:27:14 +0800] "GET /wp-content/classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.147 - - [23/Apr/2026:07:27:14 +0800] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 89.251.0.147 - - [23/Apr/2026:07:27:14 +0800] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.113 - - [23/Apr/2026:07:27:15 +0800] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.113 - - [23/Apr/2026:07:27:15 +0800] "GET /wp-includes/db.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.135 - - [23/Apr/2026:07:27:16 +0800] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.126 - - [23/Apr/2026:07:27:17 +0800] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.135 - - [23/Apr/2026:07:27:17 +0800] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.150 - - [23/Apr/2026:07:27:18 +0800] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:27:19 +0800] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.134 - - [23/Apr/2026:07:27:19 +0800] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 89.251.0.134 - - [23/Apr/2026:07:27:20 +0800] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.134 - - [23/Apr/2026:07:27:20 +0800] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.114 - - [23/Apr/2026:07:27:21 +0800] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:27:21 +0800] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.136 - - [23/Apr/2026:07:27:22 +0800] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.139 - - [23/Apr/2026:07:27:23 +0800] "GET /wp-includes/Text/options.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:27:24 +0800] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:27:24 +0800] "GET /wp-content/upgrade/cc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 89.251.0.139 - - [23/Apr/2026:07:27:25 +0800] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:27:25 +0800] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.139 - - [23/Apr/2026:07:27:25 +0800] "GET /wp-admin/includes/class_api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:27:26 +0800] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:27:26 +0800] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 89.251.0.139 - - [23/Apr/2026:07:27:26 +0800] "GET /wp-admin/css/wp-css.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.139 - - [23/Apr/2026:07:27:27 +0800] "GET /wp-includes/IXR/goto.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.132 - - [23/Apr/2026:07:27:27 +0800] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 89.251.0.132 - - [23/Apr/2026:07:27:28 +0800] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 89.251.0.132 - - [23/Apr/2026:07:27:28 +0800] "GET /Sanskrit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.132 - - [23/Apr/2026:07:27:28 +0800] "GET /wp-fmfile.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 89.251.0.132 - - [23/Apr/2026:07:27:29 +0800] "GET /.trash7309/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.132 - - [23/Apr/2026:07:27:29 +0800] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.132 - - [23/Apr/2026:07:27:29 +0800] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.132 - - [23/Apr/2026:07:27:30 +0800] "GET /memberfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.132 - - [23/Apr/2026:07:27:30 +0800] "GET /infos.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 89.251.0.132 - - [23/Apr/2026:07:27:31 +0800] "GET /modules/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 89.251.0.132 - - [23/Apr/2026:07:27:31 +0800] "GET /wp-content/x.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.132 - - [23/Apr/2026:07:27:32 +0800] "GET /wp-content/wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 89.251.0.132 - - [23/Apr/2026:07:27:32 +0800] "GET /options-writing.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 89.251.0.132 - - [23/Apr/2026:07:27:32 +0800] "GET /options-reading.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.132 - - [23/Apr/2026:07:27:33 +0800] "GET /wsad.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.132 - - [23/Apr/2026:07:27:33 +0800] "GET /nation.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 89.251.0.132 - - [23/Apr/2026:07:27:33 +0800] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.146 - - [23/Apr/2026:07:27:34 +0800] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 89.251.0.114 - - [23/Apr/2026:07:27:35 +0800] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.132 - - [23/Apr/2026:07:27:35 +0800] "GET /autoload_classmap/wso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.132 - - [23/Apr/2026:07:27:36 +0800] "GET /wp-atomx.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.132 - - [23/Apr/2026:07:27:36 +0800] "GET /admin-footer.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.132 - - [23/Apr/2026:07:27:36 +0800] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 89.251.0.132 - - [23/Apr/2026:07:27:37 +0800] "GET /XxX.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.132 - - [23/Apr/2026:07:27:37 +0800] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.132 - - [23/Apr/2026:07:27:37 +0800] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.133 - - [23/Apr/2026:07:27:38 +0800] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.151 - - [23/Apr/2026:07:27:39 +0800] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.151 - - [23/Apr/2026:07:27:40 +0800] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.151 - - [23/Apr/2026:07:27:41 +0800] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.151 - - [23/Apr/2026:07:27:41 +0800] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.151 - - [23/Apr/2026:07:27:41 +0800] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 89.251.0.151 - - [23/Apr/2026:07:27:42 +0800] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.138 - - [23/Apr/2026:07:27:42 +0800] "GET /css/media-widget-vide02.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:27:43 +0800] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.128 - - [23/Apr/2026:07:27:44 +0800] "GET /images/buy.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.128 - - [23/Apr/2026:07:27:44 +0800] "GET /templates/beez3/av.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 89.251.0.128 - - [23/Apr/2026:07:27:45 +0800] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:27:45 +0800] "GET /wp-admin/css/colors/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 89.251.0.120 - - [23/Apr/2026:07:27:46 +0800] "GET /plugins/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:27:46 +0800] "GET /.well-known/header.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:27:46 +0800] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:27:47 +0800] "GET /.well-known/pki-validation/server.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:27:47 +0800] "GET /autoload_classmap/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.120 - - [23/Apr/2026:07:27:48 +0800] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:27:48 +0800] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 89.251.0.120 - - [23/Apr/2026:07:27:48 +0800] "GET /wp-content/uploads/anas.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 89.251.0.120 - - [23/Apr/2026:07:27:49 +0800] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:27:49 +0800] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:27:49 +0800] "GET /wp-includes/Text/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 89.251.0.125 - - [23/Apr/2026:07:27:50 +0800] "GET /xex.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.125 - - [23/Apr/2026:07:27:50 +0800] "GET /wp-includes/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.121 - - [23/Apr/2026:07:27:52 +0800] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.121 - - [23/Apr/2026:07:27:52 +0800] "GET /upload/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 89.251.0.121 - - [23/Apr/2026:07:27:53 +0800] "GET /wp-head.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.121 - - [23/Apr/2026:07:27:53 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.121 - - [23/Apr/2026:07:27:54 +0800] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.121 - - [23/Apr/2026:07:27:55 +0800] "GET /makeasmtp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 89.251.0.121 - - [23/Apr/2026:07:27:55 +0800] "GET /wp-includes/wp-sup.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.128 - - [23/Apr/2026:07:27:56 +0800] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.128 - - [23/Apr/2026:07:27:56 +0800] "GET /images/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.128 - - [23/Apr/2026:07:27:57 +0800] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.125 - - [23/Apr/2026:07:27:57 +0800] "GET /wp-content/edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 89.251.0.125 - - [23/Apr/2026:07:27:58 +0800] "GET /.well-known/info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.125 - - [23/Apr/2026:07:27:58 +0800] "GET /wp-content/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.125 - - [23/Apr/2026:07:27:58 +0800] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.125 - - [23/Apr/2026:07:27:59 +0800] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 89.251.0.140 - - [23/Apr/2026:07:27:59 +0800] "GET /xp.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.140 - - [23/Apr/2026:07:28:00 +0800] "GET /wp-content/languages/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.140 - - [23/Apr/2026:07:28:00 +0800] "GET /wp-content/bypass_1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 89.251.0.140 - - [23/Apr/2026:07:28:00 +0800] "GET /wp-admin/js/elementskit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 89.251.0.140 - - [23/Apr/2026:07:28:01 +0800] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.134 - - [23/Apr/2026:07:28:02 +0800] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.134 - - [23/Apr/2026:07:28:02 +0800] "GET /click.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.134 - - [23/Apr/2026:07:28:02 +0800] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.148 - - [23/Apr/2026:07:28:03 +0800] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 89.251.0.143 - - [23/Apr/2026:07:28:04 +0800] "GET /wp-admin/css/colors/error.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.143 - - [23/Apr/2026:07:28:04 +0800] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.143 - - [23/Apr/2026:07:28:04 +0800] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 89.251.0.143 - - [23/Apr/2026:07:28:05 +0800] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.143 - - [23/Apr/2026:07:28:05 +0800] "GET /wp-admin/maint/repairs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.143 - - [23/Apr/2026:07:28:05 +0800] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 89.251.0.135 - - [23/Apr/2026:07:28:06 +0800] "GET /wp-admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 89.251.0.135 - - [23/Apr/2026:07:28:06 +0800] "GET /wp-header.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.135 - - [23/Apr/2026:07:28:07 +0800] "GET /file.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 89.251.0.135 - - [23/Apr/2026:07:28:07 +0800] "GET /.tmb/doc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 89.251.0.135 - - [23/Apr/2026:07:28:07 +0800] "GET /wp-editor.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.135 - - [23/Apr/2026:07:28:08 +0800] "GET /wp-includes/style-engine-session.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 89.251.0.121 - - [23/Apr/2026:07:28:08 +0800] "GET /images/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.121 - - [23/Apr/2026:07:28:09 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 89.251.0.121 - - [23/Apr/2026:07:28:09 +0800] "GET /adminfusm.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.121 - - [23/Apr/2026:07:28:09 +0800] "GET /js/js1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.121 - - [23/Apr/2026:07:28:10 +0800] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.129 - - [23/Apr/2026:07:28:10 +0800] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.123 - - [23/Apr/2026:07:28:11 +0800] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.123 - - [23/Apr/2026:07:28:11 +0800] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.127 - - [23/Apr/2026:07:28:12 +0800] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.127 - - [23/Apr/2026:07:28:12 +0800] "GET /about/function.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.127 - - [23/Apr/2026:07:28:13 +0800] "GET /wp-includes/images/install.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.151 - - [23/Apr/2026:07:28:13 +0800] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:28:14 +0800] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.138 - - [23/Apr/2026:07:28:15 +0800] "GET /f35_SpaceTn.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.138 - - [23/Apr/2026:07:28:15 +0800] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 89.251.0.138 - - [23/Apr/2026:07:28:15 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.138 - - [23/Apr/2026:07:28:16 +0800] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:28:16 +0800] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.138 - - [23/Apr/2026:07:28:16 +0800] "GET /wp-includes/category-double.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 89.251.0.131 - - [23/Apr/2026:07:28:17 +0800] "GET /wp-admin/maint/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 89.251.0.131 - - [23/Apr/2026:07:28:18 +0800] "GET /blog/signatur.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.131 - - [23/Apr/2026:07:28:18 +0800] "GET /wp-includes/assets/db.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 89.251.0.128 - - [23/Apr/2026:07:28:19 +0800] "GET /wp-includes/widgets/security.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 89.251.0.139 - - [23/Apr/2026:07:28:19 +0800] "GET /include/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:28:19 +0800] "GET /gm.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:28:20 +0800] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.135 - - [23/Apr/2026:07:28:20 +0800] "GET /js/content-type.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.135 - - [23/Apr/2026:07:28:21 +0800] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.134 - - [23/Apr/2026:07:28:21 +0800] "GET /about/goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.134 - - [23/Apr/2026:07:28:22 +0800] "GET /file/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.134 - - [23/Apr/2026:07:28:22 +0800] "GET /function/goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 89.251.0.134 - - [23/Apr/2026:07:28:22 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.134 - - [23/Apr/2026:07:28:23 +0800] "GET /wp-content/upgrade/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.134 - - [23/Apr/2026:07:28:23 +0800] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.143 - - [23/Apr/2026:07:28:24 +0800] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.143 - - [23/Apr/2026:07:28:24 +0800] "GET /plugin-install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.143 - - [23/Apr/2026:07:28:24 +0800] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.124 - - [23/Apr/2026:07:28:25 +0800] "GET /wp-admin/js/load.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.124 - - [23/Apr/2026:07:28:25 +0800] "GET /images/firewall.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.124 - - [23/Apr/2026:07:28:25 +0800] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 89.251.0.140 - - [23/Apr/2026:07:28:26 +0800] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.140 - - [23/Apr/2026:07:28:26 +0800] "GET /wp-includes/as.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.141 - - [23/Apr/2026:07:28:27 +0800] "GET /wp-content/item.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.141 - - [23/Apr/2026:07:28:27 +0800] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.140 - - [23/Apr/2026:07:28:28 +0800] "GET /wp-includes/install.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.125 - - [23/Apr/2026:07:28:29 +0800] "GET /wp-includes/customize/db.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.126 - - [23/Apr/2026:07:28:30 +0800] "GET /css/fan.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.126 - - [23/Apr/2026:07:28:30 +0800] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 89.251.0.126 - - [23/Apr/2026:07:28:30 +0800] "GET /images/mah.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.126 - - [23/Apr/2026:07:28:31 +0800] "GET /wp-content/waf_defender.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.126 - - [23/Apr/2026:07:28:31 +0800] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.126 - - [23/Apr/2026:07:28:32 +0800] "GET /wp-content/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 89.251.0.126 - - [23/Apr/2026:07:28:32 +0800] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.146 - - [23/Apr/2026:07:28:33 +0800] "GET /wp-content/content.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 89.251.0.146 - - [23/Apr/2026:07:28:33 +0800] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.146 - - [23/Apr/2026:07:28:33 +0800] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 89.251.0.146 - - [23/Apr/2026:07:28:34 +0800] "GET /wp-includes/rk2.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.138 - - [23/Apr/2026:07:28:34 +0800] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:28:35 +0800] "GET /b.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.138 - - [23/Apr/2026:07:28:35 +0800] "GET /wp-includes/certificates/past.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.117 - - [23/Apr/2026:07:28:36 +0800] "GET /css/as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.117 - - [23/Apr/2026:07:28:36 +0800] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 89.251.0.117 - - [23/Apr/2026:07:28:36 +0800] "GET /wp-includes/edit-tags.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:28:37 +0800] "GET /wsax.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:28:37 +0800] "GET /bless.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:28:38 +0800] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.115 - - [23/Apr/2026:07:28:38 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.115 - - [23/Apr/2026:07:28:38 +0800] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 89.251.0.115 - - [23/Apr/2026:07:28:39 +0800] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.142 - - [23/Apr/2026:07:28:39 +0800] "GET /wp-content/plugins/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 89.251.0.142 - - [23/Apr/2026:07:28:40 +0800] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.125 - - [23/Apr/2026:07:28:40 +0800] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.125 - - [23/Apr/2026:07:28:41 +0800] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 89.251.0.146 - - [23/Apr/2026:07:28:41 +0800] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.146 - - [23/Apr/2026:07:28:42 +0800] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 89.251.0.146 - - [23/Apr/2026:07:28:42 +0800] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 89.251.0.124 - - [23/Apr/2026:07:28:43 +0800] "GET /wp-admin/js/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 89.251.0.124 - - [23/Apr/2026:07:28:43 +0800] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.124 - - [23/Apr/2026:07:28:44 +0800] "GET /uploads/xsec.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 89.251.0.124 - - [23/Apr/2026:07:28:44 +0800] "GET /images/Marvins.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 89.251.0.124 - - [23/Apr/2026:07:28:45 +0800] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 89.251.0.124 - - [23/Apr/2026:07:28:45 +0800] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 89.251.0.124 - - [23/Apr/2026:07:28:45 +0800] "GET /wp-content/languages/radio.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.124 - - [23/Apr/2026:07:28:46 +0800] "GET /wp-content/uploads/fileman.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.124 - - [23/Apr/2026:07:28:46 +0800] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 89.251.0.124 - - [23/Apr/2026:07:28:47 +0800] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 89.251.0.129 - - [23/Apr/2026:07:28:48 +0800] "GET /admin.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 89.251.0.129 - - [23/Apr/2026:07:28:48 +0800] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.129 - - [23/Apr/2026:07:28:49 +0800] "GET /wp-admin/maint/byps.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.129 - - [23/Apr/2026:07:28:49 +0800] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.145 - - [23/Apr/2026:07:28:50 +0800] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:28:51 +0800] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.115 - - [23/Apr/2026:07:28:54 +0800] "GET /wp-admin/network/class.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.115 - - [23/Apr/2026:07:28:55 +0800] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 89.251.0.114 - - [23/Apr/2026:07:28:55 +0800] "GET /wp-includes/ms-file.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.121 - - [23/Apr/2026:07:28:56 +0800] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 89.251.0.121 - - [23/Apr/2026:07:28:56 +0800] "GET /wp-includes/widgets/av.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.150 - - [23/Apr/2026:07:28:57 +0800] "GET /chosen.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 89.251.0.150 - - [23/Apr/2026:07:28:57 +0800] "GET /bs1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.150 - - [23/Apr/2026:07:28:58 +0800] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.132 - - [23/Apr/2026:07:28:59 +0800] "GET /wp-includes/network.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.150 - - [23/Apr/2026:07:29:00 +0800] "GET /page.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 89.251.0.150 - - [23/Apr/2026:07:29:01 +0800] "GET /wp-admin/includes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 89.251.0.150 - - [23/Apr/2026:07:29:01 +0800] "GET /wp-content/uploads/chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.150 - - [23/Apr/2026:07:29:01 +0800] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.150 - - [23/Apr/2026:07:29:02 +0800] "GET /wp-content/admin-footer.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.150 - - [23/Apr/2026:07:29:02 +0800] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.150 - - [23/Apr/2026:07:29:02 +0800] "GET /assets/info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.150 - - [23/Apr/2026:07:29:03 +0800] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:29:04 +0800] "GET /wp-includes/pomo/item.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.147 - - [23/Apr/2026:07:29:04 +0800] "GET /wp-content/1.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.147 - - [23/Apr/2026:07:29:05 +0800] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.147 - - [23/Apr/2026:07:29:05 +0800] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:29:06 +0800] "GET /wp-includes/assets/install.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.137 - - [23/Apr/2026:07:29:06 +0800] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 89.251.0.137 - - [23/Apr/2026:07:29:07 +0800] "GET /wp-admin/css/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 89.251.0.137 - - [23/Apr/2026:07:29:07 +0800] "GET /images/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.137 - - [23/Apr/2026:07:29:07 +0800] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.145 - - [23/Apr/2026:07:29:08 +0800] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.145 - - [23/Apr/2026:07:29:08 +0800] "GET /wp-admin/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.145 - - [23/Apr/2026:07:29:09 +0800] "GET /wp-admin/css/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.145 - - [23/Apr/2026:07:29:09 +0800] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.132 - - [23/Apr/2026:07:29:13 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.132 - - [23/Apr/2026:07:29:13 +0800] "GET /wp-includes/rest-api/1.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:29:14 +0800] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.119 - - [23/Apr/2026:07:29:15 +0800] "GET /shop.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 89.251.0.119 - - [23/Apr/2026:07:29:15 +0800] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.119 - - [23/Apr/2026:07:29:15 +0800] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.119 - - [23/Apr/2026:07:29:16 +0800] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 89.251.0.113 - - [23/Apr/2026:07:29:17 +0800] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.113 - - [23/Apr/2026:07:29:17 +0800] "GET /wp-admin/user/header.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 89.251.0.113 - - [23/Apr/2026:07:29:17 +0800] "GET /wp-includes/IXR/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 89.251.0.134 - - [23/Apr/2026:07:29:18 +0800] "GET /wp-api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.134 - - [23/Apr/2026:07:29:18 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 89.251.0.134 - - [23/Apr/2026:07:29:19 +0800] "GET /css.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.134 - - [23/Apr/2026:07:29:19 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.134 - - [23/Apr/2026:07:29:19 +0800] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.148 - - [23/Apr/2026:07:29:23 +0800] "GET /wp-includes/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.119 - - [23/Apr/2026:07:29:23 +0800] "GET /images/fm.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.119 - - [23/Apr/2026:07:29:24 +0800] "GET /wp-includes/count.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.131 - - [23/Apr/2026:07:29:24 +0800] "GET /wp-error_log.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 89.251.0.131 - - [23/Apr/2026:07:29:25 +0800] "GET /assets/class_update_plugins.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.131 - - [23/Apr/2026:07:29:27 +0800] "GET /wp-admin/network/av.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 89.251.0.131 - - [23/Apr/2026:07:29:27 +0800] "GET /templates/beez5/error.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.131 - - [23/Apr/2026:07:29:28 +0800] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.131 - - [23/Apr/2026:07:29:28 +0800] "GET /js/firewall.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 89.251.0.131 - - [23/Apr/2026:07:29:28 +0800] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.121 - - [23/Apr/2026:07:29:29 +0800] "GET /assets/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.121 - - [23/Apr/2026:07:29:29 +0800] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.121 - - [23/Apr/2026:07:29:30 +0800] "GET /images/stories/themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 89.251.0.121 - - [23/Apr/2026:07:29:30 +0800] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.117 - - [23/Apr/2026:07:29:31 +0800] "GET /wp-includes/firewall.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 89.251.0.117 - - [23/Apr/2026:07:29:31 +0800] "GET /home/O-Simple.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.117 - - [23/Apr/2026:07:29:32 +0800] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 89.251.0.141 - - [23/Apr/2026:07:29:32 +0800] "GET /wp-includes/vars-soap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.142 - - [23/Apr/2026:07:29:33 +0800] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 89.251.0.142 - - [23/Apr/2026:07:29:34 +0800] "GET /style.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.142 - - [23/Apr/2026:07:29:34 +0800] "GET /files.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 89.251.0.142 - - [23/Apr/2026:07:29:34 +0800] "GET /wp-content/themes/av.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.142 - - [23/Apr/2026:07:29:34 +0800] "GET /wp-admin/css/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.142 - - [23/Apr/2026:07:29:35 +0800] "GET /saka.phP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.142 - - [23/Apr/2026:07:29:35 +0800] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.137 - - [23/Apr/2026:07:29:36 +0800] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.137 - - [23/Apr/2026:07:29:36 +0800] "GET /baxa1.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.137 - - [23/Apr/2026:07:29:36 +0800] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.123 - - [23/Apr/2026:07:29:37 +0800] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.123 - - [23/Apr/2026:07:29:37 +0800] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.151 - - [23/Apr/2026:07:29:38 +0800] "GET /blog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.151 - - [23/Apr/2026:07:29:38 +0800] "GET /about/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.151 - - [23/Apr/2026:07:29:39 +0800] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 89.251.0.151 - - [23/Apr/2026:07:29:39 +0800] "GET /wp-admin/network/chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 89.251.0.151 - - [23/Apr/2026:07:29:39 +0800] "GET /images/av.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.151 - - [23/Apr/2026:07:29:40 +0800] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 89.251.0.126 - - [23/Apr/2026:07:29:40 +0800] "GET /wp-includes/colour.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.124 - - [23/Apr/2026:07:29:41 +0800] "GET /elp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.124 - - [23/Apr/2026:07:29:41 +0800] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.114 - - [23/Apr/2026:07:29:42 +0800] "GET /wp-includes/images/include.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 89.251.0.126 - - [23/Apr/2026:07:29:43 +0800] "GET /wp-content/themes/av.php.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 89.251.0.126 - - [23/Apr/2026:07:29:43 +0800] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.126 - - [23/Apr/2026:07:29:43 +0800] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.137 - - [23/Apr/2026:07:29:44 +0800] "GET /upload/bilder/cong.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.137 - - [23/Apr/2026:07:29:44 +0800] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 89.251.0.137 - - [23/Apr/2026:07:29:45 +0800] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.126 - - [23/Apr/2026:07:29:45 +0800] "GET /wp-includes/assets/about5.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 89.251.0.134 - - [23/Apr/2026:07:29:46 +0800] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 89.251.0.134 - - [23/Apr/2026:07:29:46 +0800] "GET /wp-content/cong.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.134 - - [23/Apr/2026:07:29:47 +0800] "GET /js/db.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.134 - - [23/Apr/2026:07:29:47 +0800] "GET /.well-known/buy.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.134 - - [23/Apr/2026:07:29:47 +0800] "GET /wp-includes/ID3/db.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.143 - - [23/Apr/2026:07:29:48 +0800] "GET /function/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 89.251.0.143 - - [23/Apr/2026:07:29:48 +0800] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.143 - - [23/Apr/2026:07:29:49 +0800] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 89.251.0.120 - - [23/Apr/2026:07:29:49 +0800] "GET /testt.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:29:50 +0800] "GET /wp-content/uploads/goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:29:50 +0800] "GET /wp-admin/js/sad.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:29:50 +0800] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:29:51 +0800] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.128 - - [23/Apr/2026:07:29:51 +0800] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.126 - - [23/Apr/2026:07:29:52 +0800] "GET /network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 89.251.0.126 - - [23/Apr/2026:07:29:53 +0800] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 89.251.0.126 - - [23/Apr/2026:07:29:53 +0800] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 89.251.0.113 - - [23/Apr/2026:07:29:54 +0800] "GET /wikindex.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.113 - - [23/Apr/2026:07:29:54 +0800] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.113 - - [23/Apr/2026:07:29:54 +0800] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.128 - - [23/Apr/2026:07:29:55 +0800] "GET /wp-includes/css/dist/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.126 - - [23/Apr/2026:07:29:55 +0800] "GET /wp-content/as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.126 - - [23/Apr/2026:07:29:56 +0800] "GET /wp-includes/customize/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.131 - - [23/Apr/2026:07:29:56 +0800] "GET /wp-includes/js/simi.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:29:58 +0800] "GET /wp-admin/images/chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:29:58 +0800] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:29:59 +0800] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.132 - - [23/Apr/2026:07:29:59 +0800] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.132 - - [23/Apr/2026:07:30:00 +0800] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 89.251.0.139 - - [23/Apr/2026:07:30:00 +0800] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.136 - - [23/Apr/2026:07:30:02 +0800] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.125 - - [23/Apr/2026:07:30:03 +0800] "GET /wp-admin/css/chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.125 - - [23/Apr/2026:07:30:03 +0800] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 89.251.0.125 - - [23/Apr/2026:07:30:03 +0800] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.116 - - [23/Apr/2026:07:30:04 +0800] "GET /wp-content/alam.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 89.251.0.116 - - [23/Apr/2026:07:30:05 +0800] "GET /css/adminfusm.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.116 - - [23/Apr/2026:07:30:05 +0800] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.136 - - [23/Apr/2026:07:30:06 +0800] "GET /wp-content/raw.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.136 - - [23/Apr/2026:07:30:06 +0800] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.116 - - [23/Apr/2026:07:30:07 +0800] "GET /wp-admin/includes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.116 - - [23/Apr/2026:07:30:07 +0800] "GET /wp-includes/customize/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.142 - - [23/Apr/2026:07:30:08 +0800] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.142 - - [23/Apr/2026:07:30:08 +0800] "GET /wp-admin/media-new.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.142 - - [23/Apr/2026:07:30:08 +0800] "GET /media-new.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.142 - - [23/Apr/2026:07:30:09 +0800] "GET /js/class_api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.142 - - [23/Apr/2026:07:30:09 +0800] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 89.251.0.142 - - [23/Apr/2026:07:30:10 +0800] "GET /admin/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.142 - - [23/Apr/2026:07:30:10 +0800] "GET /wp-includes/plugin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.141 - - [23/Apr/2026:07:30:11 +0800] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.144 - - [23/Apr/2026:07:30:11 +0800] "GET /wp-admin/js/item.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.144 - - [23/Apr/2026:07:30:12 +0800] "GET /pages.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 89.251.0.144 - - [23/Apr/2026:07:30:12 +0800] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.131 - - [23/Apr/2026:07:30:13 +0800] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.131 - - [23/Apr/2026:07:30:13 +0800] "GET /uploads/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 89.251.0.131 - - [23/Apr/2026:07:30:13 +0800] "GET /assets/js/doc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.131 - - [23/Apr/2026:07:30:14 +0800] "GET /assets/comfunctions.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 89.251.0.131 - - [23/Apr/2026:07:30:14 +0800] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 89.251.0.136 - - [23/Apr/2026:07:30:15 +0800] "GET /css/adminfus.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 89.251.0.136 - - [23/Apr/2026:07:30:15 +0800] "GET /adminfus.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.136 - - [23/Apr/2026:07:30:15 +0800] "GET /wp-includes/css/litespeed.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 89.251.0.141 - - [23/Apr/2026:07:30:16 +0800] "GET /images/as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.141 - - [23/Apr/2026:07:30:17 +0800] "GET /wp-admin/setup-config.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 89.251.0.141 - - [23/Apr/2026:07:30:17 +0800] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.148 - - [23/Apr/2026:07:30:18 +0800] "GET /cong.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.148 - - [23/Apr/2026:07:30:18 +0800] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 89.251.0.128 - - [23/Apr/2026:07:30:19 +0800] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.128 - - [23/Apr/2026:07:30:19 +0800] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 89.251.0.137 - - [23/Apr/2026:07:30:20 +0800] "GET /css/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.137 - - [23/Apr/2026:07:30:20 +0800] "GET /assets/av.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.137 - - [23/Apr/2026:07:30:20 +0800] "GET /autoload_classmap/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.137 - - [23/Apr/2026:07:30:21 +0800] "GET /wp-configs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.137 - - [23/Apr/2026:07:30:21 +0800] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:30:22 +0800] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:30:22 +0800] "GET /wp-admin/network/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 89.251.0.138 - - [23/Apr/2026:07:30:22 +0800] "GET /wp-admin/item.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.138 - - [23/Apr/2026:07:30:23 +0800] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 89.251.0.141 - - [23/Apr/2026:07:30:23 +0800] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.141 - - [23/Apr/2026:07:30:24 +0800] "GET /wp-includes/ID3/shell.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.116 - - [23/Apr/2026:07:30:24 +0800] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.144 - - [23/Apr/2026:07:30:25 +0800] "GET /ms-users.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.144 - - [23/Apr/2026:07:30:25 +0800] "GET /wp-admin/js/cc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.144 - - [23/Apr/2026:07:30:26 +0800] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 89.251.0.126 - - [23/Apr/2026:07:30:27 +0800] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.131 - - [23/Apr/2026:07:30:27 +0800] "GET /css/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.131 - - [23/Apr/2026:07:30:28 +0800] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.131 - - [23/Apr/2026:07:30:28 +0800] "GET /wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.131 - - [23/Apr/2026:07:30:28 +0800] "GET /assets/content.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 89.251.0.131 - - [23/Apr/2026:07:30:29 +0800] "GET /fm.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.131 - - [23/Apr/2026:07:30:29 +0800] "GET /wp-content/goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.131 - - [23/Apr/2026:07:30:29 +0800] "GET /wp-includes/wp-2019.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.145 - - [23/Apr/2026:07:30:30 +0800] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.132 - - [23/Apr/2026:07:30:31 +0800] "GET /assets/images/cloud.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.132 - - [23/Apr/2026:07:30:31 +0800] "GET /wp-includes/log.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.140 - - [23/Apr/2026:07:30:32 +0800] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.146 - - [23/Apr/2026:07:30:32 +0800] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 89.251.0.114 - - [23/Apr/2026:07:30:33 +0800] "GET /wp-includes/aw.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 89.251.0.126 - - [23/Apr/2026:07:30:34 +0800] "GET /update/gely.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.126 - - [23/Apr/2026:07:30:34 +0800] "GET /uploads/c99shell.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.126 - - [23/Apr/2026:07:30:35 +0800] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.126 - - [23/Apr/2026:07:30:35 +0800] "GET /uploads/lala.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.126 - - [23/Apr/2026:07:30:35 +0800] "GET /wp-includes/IXR/db.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:30:36 +0800] "GET /wp-includes/css/install.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 89.251.0.140 - - [23/Apr/2026:07:30:37 +0800] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 89.251.0.140 - - [23/Apr/2026:07:30:37 +0800] "GET /top.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.140 - - [23/Apr/2026:07:30:37 +0800] "GET /wp-includes/css/dist/install.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.113 - - [23/Apr/2026:07:30:38 +0800] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 89.251.0.114 - - [23/Apr/2026:07:30:39 +0800] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 89.251.0.114 - - [23/Apr/2026:07:30:39 +0800] "GET /wp-content/click.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 89.251.0.114 - - [23/Apr/2026:07:30:39 +0800] "GET /wp-includes/template-less.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.117 - - [23/Apr/2026:07:30:40 +0800] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 89.251.0.137 - - [23/Apr/2026:07:30:41 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.137 - - [23/Apr/2026:07:30:41 +0800] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.137 - - [23/Apr/2026:07:30:42 +0800] "GET /retu11.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 89.251.0.137 - - [23/Apr/2026:07:30:42 +0800] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 89.251.0.137 - - [23/Apr/2026:07:30:43 +0800] "GET /wp-admin/css/elementskit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 89.251.0.137 - - [23/Apr/2026:07:30:43 +0800] "GET /js/1.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.137 - - [23/Apr/2026:07:30:43 +0800] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.137 - - [23/Apr/2026:07:30:44 +0800] "GET /wp-includes/assets/min.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.146 - - [23/Apr/2026:07:30:45 +0800] "GET /wp-includes/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 89.251.0.126 - - [23/Apr/2026:07:30:45 +0800] "GET /backup/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 89.251.0.126 - - [23/Apr/2026:07:30:46 +0800] "GET /wp-content/uploads/uploads.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.126 - - [23/Apr/2026:07:30:46 +0800] "GET /wp-includes/file.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 89.251.0.115 - - [23/Apr/2026:07:30:47 +0800] "GET /wp-content/themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.115 - - [23/Apr/2026:07:30:47 +0800] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.126 - - [23/Apr/2026:07:30:48 +0800] "GET /worm0.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 89.251.0.126 - - [23/Apr/2026:07:30:48 +0800] "GET /wp-includes/load.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.150 - - [23/Apr/2026:07:30:50 +0800] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 89.251.0.148 - - [23/Apr/2026:07:30:51 +0800] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:30:52 +0800] "GET /images/c99.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.120 - - [23/Apr/2026:07:30:52 +0800] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 89.251.0.120 - - [23/Apr/2026:07:30:53 +0800] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.120 - - [23/Apr/2026:07:30:53 +0800] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.141 - - [23/Apr/2026:07:30:54 +0800] "GET /setup-config.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.141 - - [23/Apr/2026:07:30:54 +0800] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 89.251.0.140 - - [23/Apr/2026:07:30:55 +0800] "GET /wp-content/uploads/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.140 - - [23/Apr/2026:07:30:56 +0800] "GET /type.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 89.251.0.140 - - [23/Apr/2026:07:30:56 +0800] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:30:57 +0800] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.140 - - [23/Apr/2026:07:30:57 +0800] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.137 - - [23/Apr/2026:07:30:58 +0800] "GET /wp-admin/maint/flex.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.137 - - [23/Apr/2026:07:30:58 +0800] "GET /css/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.137 - - [23/Apr/2026:07:30:59 +0800] "GET /wp-admin/user/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.137 - - [23/Apr/2026:07:30:59 +0800] "GET /files/shares/403ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.137 - - [23/Apr/2026:07:31:00 +0800] "GET /goat.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.137 - - [23/Apr/2026:07:31:00 +0800] "GET /images/fix.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.137 - - [23/Apr/2026:07:31:01 +0800] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.137 - - [23/Apr/2026:07:31:01 +0800] "GET /files.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.137 - - [23/Apr/2026:07:31:01 +0800] "GET /wp-includes/assets/system.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.120 - - [23/Apr/2026:07:31:02 +0800] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 89.251.0.120 - - [23/Apr/2026:07:31:03 +0800] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.148 - - [23/Apr/2026:07:31:04 +0800] "GET /images/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.148 - - [23/Apr/2026:07:31:05 +0800] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 89.251.0.148 - - [23/Apr/2026:07:31:05 +0800] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.142 - - [23/Apr/2026:07:31:06 +0800] "GET /wp-includes/ID3/simi.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.115 - - [23/Apr/2026:07:31:06 +0800] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.135 - - [23/Apr/2026:07:31:07 +0800] "GET /admin/assets/plugins/jQuery-File-Upload/server/php/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 89.251.0.135 - - [23/Apr/2026:07:31:07 +0800] "GET /de-ideale-stookmix/wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 89.251.0.135 - - [23/Apr/2026:07:31:08 +0800] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.124 - - [23/Apr/2026:07:31:09 +0800] "GET /wp-content/plugins/wps-hide-login/wps-hide-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 89.251.0.124 - - [23/Apr/2026:07:31:09 +0800] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.124 - - [23/Apr/2026:07:31:09 +0800] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.124 - - [23/Apr/2026:07:31:10 +0800] "GET /assets/images/accesson.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 89.251.0.124 - - [23/Apr/2026:07:31:10 +0800] "GET /wp-content/plugins/wp-plugin/wp-plugin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.124 - - [23/Apr/2026:07:31:10 +0800] "GET /assets/plugins/jQuery-File-Upload/server/php/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.124 - - [23/Apr/2026:07:31:11 +0800] "GET /wp-content/plugins/wp-default/sh/member.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.124 - - [23/Apr/2026:07:31:11 +0800] "GET /wp-includes/ms-pie.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.140 - - [23/Apr/2026:07:31:12 +0800] "GET /.well-known/logs233/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.140 - - [23/Apr/2026:07:31:12 +0800] "GET /assets/plugins/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 89.251.0.140 - - [23/Apr/2026:07:31:12 +0800] "GET /wp-content/plugins/wp-security-scan/secure.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.140 - - [23/Apr/2026:07:31:13 +0800] "GET /owncloud/status.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 89.251.0.140 - - [23/Apr/2026:07:31:17 +0800] "GET /wp-includes/html-api/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.148 - - [23/Apr/2026:07:31:17 +0800] "GET /wp-content/uploads/autodiagnosis.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.148 - - [23/Apr/2026:07:31:18 +0800] "GET /wp-content/plugins/all-in-one-wp-security-and-firewall/templates/wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.148 - - [23/Apr/2026:07:31:18 +0800] "GET /wp-includes/nav-menu.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 89.251.0.138 - - [23/Apr/2026:07:31:19 +0800] "GET /wp-includes/css/dist/user.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.142 - - [23/Apr/2026:07:31:20 +0800] "GET /wp-content/plugins/pwnd/file-js.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.142 - - [23/Apr/2026:07:31:21 +0800] "GET /wp-content/mu-plugins/helper.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.142 - - [23/Apr/2026:07:31:21 +0800] "GET /wp-admin/images/archive.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.142 - - [23/Apr/2026:07:31:22 +0800] "GET /wp-admin/css/bolt.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.142 - - [23/Apr/2026:07:31:22 +0800] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.142 - - [23/Apr/2026:07:31:23 +0800] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.142 - - [23/Apr/2026:07:31:23 +0800] "GET /templates/protostar/error.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.142 - - [23/Apr/2026:07:31:24 +0800] "GET /libraries/joomla/jmails.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 89.251.0.142 - - [23/Apr/2026:07:31:24 +0800] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.142 - - [23/Apr/2026:07:31:25 +0800] "GET /wp-content/plugins/w3-total-cache/pub/sns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 89.251.0.142 - - [23/Apr/2026:07:31:25 +0800] "GET /wp-content/plugins/Ultimate_VC_Addons/assets/alfa-rex.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 89.251.0.142 - - [23/Apr/2026:07:31:26 +0800] "GET /wp-includes/js/dist/script-modules/block-library/search/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.117 - - [23/Apr/2026:07:31:26 +0800] "GET /wp-includes/customize/class-wp-customize-cropped-image-control.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.144 - - [23/Apr/2026:07:31:28 +0800] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.147 - - [23/Apr/2026:07:31:28 +0800] "GET /wp-content/admin-header.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 89.251.0.147 - - [23/Apr/2026:07:31:29 +0800] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.147 - - [23/Apr/2026:07:31:29 +0800] "GET /wp-content/uploads/system_core.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 89.251.0.147 - - [23/Apr/2026:07:31:30 +0800] "GET /wp-includes/css/dist/preferences/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.113 - - [23/Apr/2026:07:31:31 +0800] "GET /wp-includes/blocks/media-text/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 89.251.0.148 - - [23/Apr/2026:07:31:32 +0800] "GET /wp-includes/phpmailer/phpmailer.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.145 - - [23/Apr/2026:07:31:33 +0800] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.145 - - [23/Apr/2026:07:31:33 +0800] "GET /plus/90sec.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.145 - - [23/Apr/2026:07:31:33 +0800] "GET /.trash7206/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.145 - - [23/Apr/2026:07:31:34 +0800] "GET /storage/framework/views/core.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.145 - - [23/Apr/2026:07:31:34 +0800] "GET /wp-content/plugins/filester/assets/css/404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 89.251.0.145 - - [23/Apr/2026:07:31:35 +0800] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.145 - - [23/Apr/2026:07:31:35 +0800] "GET /wp-includes/blocks/latest-comments/template-loader.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.127 - - [23/Apr/2026:07:31:35 +0800] "GET /wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.127 - - [23/Apr/2026:07:31:36 +0800] "GET /wp-content/wpvivid_uploads/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 89.251.0.127 - - [23/Apr/2026:07:31:36 +0800] "GET /wp-content/plugins/hello-plus/classes/ehp-sarang.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 89.251.0.127 - - [23/Apr/2026:07:31:37 +0800] "GET /wp-content/themes/news-portal/fm.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.127 - - [23/Apr/2026:07:31:37 +0800] "GET /wp-admin/dofault.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.127 - - [23/Apr/2026:07:31:38 +0800] "GET /wp-content/themes/theme-check/main.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.127 - - [23/Apr/2026:07:31:41 +0800] "GET /wp-content/plugins/advanced-product-fields-for-woocommerce/db.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.127 - - [23/Apr/2026:07:31:41 +0800] "GET /wp-includes/blocks/nextpage/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.126 - - [23/Apr/2026:07:31:42 +0800] "GET /wp-content/plugins/akismet/views/cmd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.126 - - [23/Apr/2026:07:31:43 +0800] "GET /wp-admin/includes/nav-menu-trigger.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.126 - - [23/Apr/2026:07:31:43 +0800] "GET /wp-includes/link-template-firewall.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.144 - - [23/Apr/2026:07:31:44 +0800] "GET /assets/plugins/plupload/examples/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.144 - - [23/Apr/2026:07:31:44 +0800] "GET /libraries/vendor/updates.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 89.251.0.144 - - [23/Apr/2026:07:31:45 +0800] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 89.251.0.144 - - [23/Apr/2026:07:31:45 +0800] "GET /themes/fitnessbase/404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.144 - - [23/Apr/2026:07:31:45 +0800] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.144 - - [23/Apr/2026:07:31:46 +0800] "GET /libraries/legacy/updates.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.144 - - [23/Apr/2026:07:31:46 +0800] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.144 - - [23/Apr/2026:07:31:47 +0800] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 89.251.0.144 - - [23/Apr/2026:07:31:47 +0800] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 89.251.0.144 - - [23/Apr/2026:07:31:49 +0800] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.144 - - [23/Apr/2026:07:31:50 +0800] "GET /css/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 89.251.0.144 - - [23/Apr/2026:07:31:53 +0800] "GET /assets/global/plugins/plupload/examples/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.144 - - [23/Apr/2026:07:31:54 +0800] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.140 - - [23/Apr/2026:07:31:57 +0800] "GET /wp-includes/SimplePie/src/Decode/HTML/sitemaps.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 89.251.0.148 - - [23/Apr/2026:07:31:58 +0800] "GET /wp-includes/mer_gagal.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.123 - - [23/Apr/2026:07:32:02 +0800] "GET /wp-includes/html-api/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.125 - - [23/Apr/2026:07:32:03 +0800] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.125 - - [23/Apr/2026:07:32:06 +0800] "GET /wp-content/uploads/link.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.125 - - [23/Apr/2026:07:32:07 +0800] "GET /wp-content/uploads/plugins.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 89.251.0.125 - - [23/Apr/2026:07:32:07 +0800] "GET /wp-includes/rest-api/alfa-rex.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.135 - - [23/Apr/2026:07:32:08 +0800] "GET /wp-includes/ID3/Core32.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 89.251.0.128 - - [23/Apr/2026:07:32:09 +0800] "GET /wp-content/themes/classic/inc/json.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.128 - - [23/Apr/2026:07:32:09 +0800] "GET /admin/editor/engine.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 89.251.0.128 - - [23/Apr/2026:07:32:10 +0800] "GET /wp-admin/post-new.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.128 - - [23/Apr/2026:07:32:11 +0800] "GET /lib/functions.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 89.251.0.128 - - [23/Apr/2026:07:32:11 +0800] "GET /Assets/edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.128 - - [23/Apr/2026:07:32:12 +0800] "GET /wp-includes/theme-compat/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:32:12 +0800] "GET /assets/bootstrap-fileupload/lock2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.120 - - [23/Apr/2026:07:32:13 +0800] "GET /wp-content/plugins/envato-market/inc/class-envato-market-github.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:32:13 +0800] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:32:13 +0800] "GET /assets/jquery-ui/images/lock2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.120 - - [23/Apr/2026:07:32:14 +0800] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.145 - - [23/Apr/2026:07:32:15 +0800] "GET /wp-includes/Requests/library/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:15 +0800] "GET /update/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:16 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.139 - - [23/Apr/2026:07:32:16 +0800] "GET /wp-admin/maint/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 89.251.0.139 - - [23/Apr/2026:07:32:17 +0800] "GET /themes/zMousse/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:17 +0800] "GET /wp-content/plugins/ubh/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:18 +0800] "GET /wp-admin/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.139 - - [23/Apr/2026:07:32:18 +0800] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:19 +0800] "GET /wp-content/themes/pridmag/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:19 +0800] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:19 +0800] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:20 +0800] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:20 +0800] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:21 +0800] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:21 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:21 +0800] "GET /wp-includes/style-engine/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:22 +0800] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 89.251.0.139 - - [23/Apr/2026:07:32:22 +0800] "GET /wp-content/plugins/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.139 - - [23/Apr/2026:07:32:23 +0800] "GET /uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 89.251.0.139 - - [23/Apr/2026:07:32:23 +0800] "GET /js/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.139 - - [23/Apr/2026:07:32:23 +0800] "GET /.well-known/pki-validation/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:24 +0800] "GET /wp-includes/js/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.139 - - [23/Apr/2026:07:32:24 +0800] "GET /wp-content/upgrade/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:24 +0800] "GET /wp-content/languages/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:25 +0800] "GET /wp-content/themes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 89.251.0.139 - - [23/Apr/2026:07:32:25 +0800] "GET /wp-content/plugins/elementor/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:26 +0800] "GET /wp-includes/IXR/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:26 +0800] "GET /wp-includes/widgets/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.139 - - [23/Apr/2026:07:32:27 +0800] "GET /admin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.139 - - [23/Apr/2026:07:32:27 +0800] "GET /wp-includes/images/smilies/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:28 +0800] "GET /wp-includes/js/crop/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:28 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:28 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.139 - - [23/Apr/2026:07:32:29 +0800] "GET /wp-admin/js/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:29 +0800] "GET /wp-includes/js/jquery/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 89.251.0.139 - - [23/Apr/2026:07:32:30 +0800] "GET /wp-includes/block-supports/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 89.251.0.139 - - [23/Apr/2026:07:32:30 +0800] "GET /wp-admin/network/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:31 +0800] "GET /wp-admin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 89.251.0.139 - - [23/Apr/2026:07:32:31 +0800] "GET /wp-includes/blocks/table/int/tmpl/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:32 +0800] "GET /wp-includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.139 - - [23/Apr/2026:07:32:33 +0800] "GET /wp-includes/customize/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.139 - - [23/Apr/2026:07:32:33 +0800] "GET /wp-includes/SimplePie/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:36 +0800] "GET /wp-includes/theme-compat/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:36 +0800] "GET /wp-includes/Requests/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:37 +0800] "GET /wp-includes/ID3/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.139 - - [23/Apr/2026:07:32:37 +0800] "GET /wp-content/x/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 89.251.0.139 - - [23/Apr/2026:07:32:37 +0800] "GET /wp-includes/assets/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:38 +0800] "GET /wp-includes/fonts/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.139 - - [23/Apr/2026:07:32:38 +0800] "GET /autoload_classmap/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.139 - - [23/Apr/2026:07:32:38 +0800] "GET /wp-content/themes/tflow/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:39 +0800] "GET /templates/beez3/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.139 - - [23/Apr/2026:07:32:39 +0800] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.139 - - [23/Apr/2026:07:32:39 +0800] "GET /components/com_jea/views/form/tmpl/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.139 - - [23/Apr/2026:07:32:40 +0800] "GET /templates/beez/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:40 +0800] "GET /wp-admin/css/colors/light/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:40 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 89.251.0.139 - - [23/Apr/2026:07:32:41 +0800] "GET /wp-includes/rest-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:42 +0800] "GET /css/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:42 +0800] "GET /wp-admin/user/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.139 - - [23/Apr/2026:07:32:42 +0800] "GET /assets/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.139 - - [23/Apr/2026:07:32:43 +0800] "GET /wp-admin/css/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:43 +0800] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.139 - - [23/Apr/2026:07:32:43 +0800] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.139 - - [23/Apr/2026:07:32:44 +0800] "GET /wp-content/plugins/up/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:45 +0800] "GET /fonts/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:45 +0800] "GET /wp-admin/includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:46 +0800] "GET /images/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:46 +0800] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.139 - - [23/Apr/2026:07:32:47 +0800] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:47 +0800] "GET /wp-includes/pomo/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.139 - - [23/Apr/2026:07:32:48 +0800] "GET /wp-content/themes/twentytwentythree/patterns/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.139 - - [23/Apr/2026:07:32:48 +0800] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.139 - - [23/Apr/2026:07:32:48 +0800] "GET /wp-includes/block-patterns/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:49 +0800] "GET /wp-includes/certificates/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.139 - - [23/Apr/2026:07:32:50 +0800] "GET /wp-content/cache/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:51 +0800] "GET /assets/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:51 +0800] "GET /wp-admin/js/widgets/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:51 +0800] "GET /wp-includes/random_compat/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:51 +0800] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.139 - - [23/Apr/2026:07:32:52 +0800] "GET /wp-includes/images/media/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:52 +0800] "GET /wp-includes/css/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:53 +0800] "GET /wp-content/plugins/phpadmin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:53 +0800] "GET /wp-content/plugins/seoo/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:53 +0800] "GET /wp-content/plugins/view-more/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 89.251.0.139 - - [23/Apr/2026:07:32:54 +0800] "GET /wp-admin/css/colors/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 89.251.0.139 - - [23/Apr/2026:07:32:54 +0800] "GET /wp-content/themes/seotheme/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:55 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:55 +0800] "GET /wp-content/plugins/ioxi/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 89.251.0.139 - - [23/Apr/2026:07:32:55 +0800] "GET /blog/wp-content/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:56 +0800] "GET /.well-known/acme-challenge/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 89.251.0.139 - - [23/Apr/2026:07:32:57 +0800] "GET /wp-content/themes/astra/inc/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 89.251.0.139 - - [23/Apr/2026:07:32:57 +0800] "GET /wp-content/plugins/ccx/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:57 +0800] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:58 +0800] "GET /wp-includes/Requests/src/Exception/Http/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:59 +0800] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:59 +0800] "GET /wp-includes/Text/Diff/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:32:59 +0800] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 89.251.0.139 - - [23/Apr/2026:07:33:00 +0800] "GET /wp-content/themes/twentytwentytwo/assets/fonts/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:33:00 +0800] "GET /blog/wp-includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.139 - - [23/Apr/2026:07:33:01 +0800] "GET /blog/wp-admin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.139 - - [23/Apr/2026:07:33:01 +0800] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 89.251.0.139 - - [23/Apr/2026:07:33:01 +0800] "GET /wp-includes/blocks/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:02 +0800] "GET /.bod/.ll/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:03 +0800] "GET /wp-content/themes/twentytwentytwo/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.120 - - [23/Apr/2026:07:33:03 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 89.251.0.120 - - [23/Apr/2026:07:33:03 +0800] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.120 - - [23/Apr/2026:07:33:04 +0800] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.120 - - [23/Apr/2026:07:33:04 +0800] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:05 +0800] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.120 - - [23/Apr/2026:07:33:05 +0800] "GET /wp-content/plugins/fix/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:06 +0800] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:07 +0800] "GET /wp-includes/bk/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 89.251.0.120 - - [23/Apr/2026:07:33:07 +0800] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:07 +0800] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.120 - - [23/Apr/2026:07:33:08 +0800] "GET /wp-content/themes/hello-element/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 89.251.0.120 - - [23/Apr/2026:07:33:08 +0800] "GET /wp-includes/Text/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:08 +0800] "GET /wp-includes/sitemaps/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.120 - - [23/Apr/2026:07:33:09 +0800] "GET /wp-includes/sodium_compat/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 89.251.0.120 - - [23/Apr/2026:07:33:09 +0800] "GET /wp-includes/js/dist/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:10 +0800] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 89.251.0.120 - - [23/Apr/2026:07:33:10 +0800] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:10 +0800] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:11 +0800] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:11 +0800] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.120 - - [23/Apr/2026:07:33:12 +0800] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:12 +0800] "GET /wp-content/languages/themes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 89.251.0.120 - - [23/Apr/2026:07:33:13 +0800] "GET /admin/controller/extension/extension/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.120 - - [23/Apr/2026:07:33:13 +0800] "GET /img/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:13 +0800] "GET /wp-includes/interactivity-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 89.251.0.120 - - [23/Apr/2026:07:33:14 +0800] "GET /wp-includes/l10n/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.120 - - [23/Apr/2026:07:33:15 +0800] "GET /tinyfilemanager/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:15 +0800] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:16 +0800] "GET /components/com_newsfeeds/models/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.120 - - [23/Apr/2026:07:33:16 +0800] "GET /.trash7309/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 89.251.0.120 - - [23/Apr/2026:07:33:16 +0800] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 89.251.0.120 - - [23/Apr/2026:07:33:17 +0800] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:17 +0800] "GET /modules/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.120 - - [23/Apr/2026:07:33:18 +0800] "GET /wp-includes/js/codemirror/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 89.251.0.120 - - [23/Apr/2026:07:33:18 +0800] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.120 - - [23/Apr/2026:07:33:19 +0800] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 89.251.0.120 - - [23/Apr/2026:07:33:19 +0800] "GET /wp-includes/blocks/group/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:19 +0800] "GET /plugins/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.120 - - [23/Apr/2026:07:33:20 +0800] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:20 +0800] "GET /upload/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:20 +0800] "GET /wordpress/wp-includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 89.251.0.120 - - [23/Apr/2026:07:33:21 +0800] "GET /wp-includes/css/dist/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 89.251.0.120 - - [23/Apr/2026:07:33:21 +0800] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.120 - - [23/Apr/2026:07:33:21 +0800] "GET /.tmb/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:22 +0800] "GET /wp-includes/assets/wp-includes/assets/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:22 +0800] "GET /wp-includes/blocks/file/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.120 - - [23/Apr/2026:07:33:22 +0800] "GET /wp-content/mu-plugins/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.120 - - [23/Apr/2026:07:33:23 +0800] "GET /blog/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:23 +0800] "GET /include/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:24 +0800] "GET /file/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:25 +0800] "GET /wp-content/themes/twentytwentyfour/patterns/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:25 +0800] "GET /images/news_event/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:25 +0800] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:28 +0800] "GET /templates/beez5/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:28 +0800] "GET /wp-admin/js/file/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:28 +0800] "GET /wp-includes/id3/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:29 +0800] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:29 +0800] "GET /upload/bilder/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.120 - - [23/Apr/2026:07:33:30 +0800] "GET /wp-includes/Requests/Text/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:30 +0800] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 89.251.0.120 - - [23/Apr/2026:07:33:30 +0800] "GET /wp-includes/js/jcrop/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:31 +0800] "GET /wp-content/uploads/2021/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.120 - - [23/Apr/2026:07:33:31 +0800] "GET /assets/js/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:32 +0800] "GET /wp-includes/block-bindings/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.120 - - [23/Apr/2026:07:33:32 +0800] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:32 +0800] "GET /wp-includes/Requests/library/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 89.251.0.120 - - [23/Apr/2026:07:33:33 +0800] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.120 - - [23/Apr/2026:07:33:34 +0800] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 89.251.0.120 - - [23/Apr/2026:07:33:34 +0800] "GET /backup/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:34 +0800] "GET /files/shares/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 89.251.0.120 - - [23/Apr/2026:07:33:35 +0800] "GET /wp-content/plugins/xt/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:36 +0800] "GET /wp-content/plugins/content-management/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:36 +0800] "GET /wp-content/themes/Avada/licensing/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:36 +0800] "GET /Requests/Utility/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.120 - - [23/Apr/2026:07:33:37 +0800] "GET /themes/travelscape/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:37 +0800] "GET /themes/twentyseventeen/page/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.120 - - [23/Apr/2026:07:33:38 +0800] "GET /rest-api/fields/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.120 - - [23/Apr/2026:07:33:38 +0800] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.120 - - [23/Apr/2026:07:33:38 +0800] "GET /wp-content/plugins/tunnelforms/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.120 - - [23/Apr/2026:07:33:39 +0800] "GET /wp-content/languages/plugins/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:40 +0800] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.120 - - [23/Apr/2026:07:33:40 +0800] "GET /wp-includes/js/tinymce/utils/%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.120 - - [23/Apr/2026:07:33:40 +0800] "GET /themes/seotheme/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:41 +0800] "GET /wp-includes/js/jquery/ui/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:41 +0800] "GET /js/tinymce/utils/%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:42 +0800] "GET /Requests/Exception/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 89.251.0.120 - - [23/Apr/2026:07:33:42 +0800] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.120 - - [23/Apr/2026:07:33:43 +0800] "GET /wp-json/wp/v2/give_forms/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 89.251.0.120 - - [23/Apr/2026:07:33:43 +0800] "GET /wp-content/plugins/ultimate-member/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:43 +0800] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.120 - - [23/Apr/2026:07:33:44 +0800] "GET /wp-content/themes/travelscape/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:44 +0800] "GET /wp-includes/js/plupload/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.120 - - [23/Apr/2026:07:33:44 +0800] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.120 - - [23/Apr/2026:07:33:45 +0800] "GET /wp-includes/images/wlw/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:45 +0800] "GET /wp-includes/blocks/code/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:45 +0800] "GET /wp-includes/blocks/archives/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:46 +0800] "GET /wp-includes/css/dist/components/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:46 +0800] "GET /wp-content/plugins/js-support-ticket/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 89.251.0.120 - - [23/Apr/2026:07:33:46 +0800] "GET /wp-content/plugins/easy-themes-manager/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 89.251.0.147 - - [23/Apr/2026:07:33:47 +0800] "GET /wp-content/settings/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.147 - - [23/Apr/2026:07:33:47 +0800] "GET /wp-includes/blocks/pullquote/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 89.251.0.147 - - [23/Apr/2026:07:33:48 +0800] "GET /wp-content/plugins/shell/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.147 - - [23/Apr/2026:07:33:48 +0800] "GET /wp-admin/images/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.147 - - [23/Apr/2026:07:33:49 +0800] "GET /wp-includes/blocks/comments-pagination-numbers/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.147 - - [23/Apr/2026:07:33:49 +0800] "GET /wp-admin/user/interactivity-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 89.251.0.147 - - [23/Apr/2026:07:33:50 +0800] "GET /assets/bootstrap-fileupload/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 89.251.0.147 - - [23/Apr/2026:07:33:50 +0800] "GET /wp-content/plugins/yanierin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.147 - - [23/Apr/2026:07:33:50 +0800] "GET /wp-content/themes/hideo/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.147 - - [23/Apr/2026:07:33:51 +0800] "GET /wp-content/plugins/profile-builder/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 89.251.0.147 - - [23/Apr/2026:07:33:51 +0800] "GET /wp-content/plugins/plugin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 89.251.0.147 - - [23/Apr/2026:07:33:51 +0800] "GET /wp-admin/network/cache/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 89.251.0.147 - - [23/Apr/2026:07:33:52 +0800] "GET /wp-includes/blocks/details/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 89.251.0.147 - - [23/Apr/2026:07:33:52 +0800] "GET /wp-includes/blocks/post-terms/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.147 - - [23/Apr/2026:07:33:53 +0800] "GET /wp-includes/theme-compat/network/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 89.251.0.147 - - [23/Apr/2026:07:33:53 +0800] "GET /wp-includes/js/dist/development/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 89.251.0.147 - - [23/Apr/2026:07:33:54 +0800] "GET /management/assets/assets/css/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.147 - - [23/Apr/2026:07:33:54 +0800] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 89.251.0.147 - - [23/Apr/2026:07:33:55 +0800] "GET /wordpress/wp-includes/blocks/accordion/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 89.251.0.147 - - [23/Apr/2026:07:33:55 +0800] "GET /assets/worders_front/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.147 - - [23/Apr/2026:07:33:55 +0800] "GET /assets/jquery-ui/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.251.0.147 - - [23/Apr/2026:07:33:56 +0800] "GET /wp-content/uploads/2024/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.147 - - [23/Apr/2026:07:33:56 +0800] "GET /wp-content/themes/Avada/includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.147 - - [23/Apr/2026:07:33:57 +0800] "GET /wp-content/uploads/fusion-forms/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 89.251.0.147 - - [23/Apr/2026:07:33:57 +0800] "GET /wp-content/themes/Avada/includes/lib/inc/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.147 - - [23/Apr/2026:07:33:58 +0800] "GET /wp-content/themes/jupiter/framework/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 89.251.0.147 - - [23/Apr/2026:07:33:58 +0800] "GET /wp-includes/blocks/site-title/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 89.251.0.147 - - [23/Apr/2026:07:33:58 +0800] "GET /wp-content/plugins/jupiterx-core/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.251.0.147 - - [23/Apr/2026:07:33:59 +0800] "GET /wp-content/themes/Avada/shortcodes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.147 - - [23/Apr/2026:07:33:59 +0800] "GET /wp-json/bricks/v1/render_element/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.251.0.147 - - [23/Apr/2026:07:34:00 +0800] "GET /wp-content/themes/bricks/includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.147 - - [23/Apr/2026:07:34:00 +0800] "GET /wp-content/themes/service-finder/inc/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.251.0.147 - - [23/Apr/2026:07:34:01 +0800] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 89.251.0.147 - - [23/Apr/2026:07:34:02 +0800] "GET /wp-content/themes/service-finder/admin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.147 - - [23/Apr/2026:07:34:02 +0800] "GET /wp-json/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 89.251.0.147 - - [23/Apr/2026:07:34:03 +0800] "GET /wp-json/wp/v2/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.147 - - [23/Apr/2026:07:34:03 +0800] "GET /wp-content/uploads/2025/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 89.251.0.147 - - [23/Apr/2026:07:34:03 +0800] "GET /wp-content/uploads/2026/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.251.0.147 - - [23/Apr/2026:07:34:04 +0800] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 69.5.21.178 - - [23/Apr/2026:07:51:37 +0800] "GET /.git/logs/HEAD HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 69.5.21.178 - - [23/Apr/2026:07:52:08 +0800] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 69.5.21.178 - - [23/Apr/2026:07:53:57 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 69.5.21.178 - - [23/Apr/2026:07:53:57 +0800] "GET /.git/HEAD HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 69.5.21.178 - - [23/Apr/2026:07:53:57 +0800] "GET /.git/index HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 69.5.21.178 - - [23/Apr/2026:07:54:52 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 69.5.21.178 - - [23/Apr/2026:07:54:52 +0800] "GET /sitemap.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" 69.5.21.178 - - [23/Apr/2026:07:59:19 +0800] "GET /config.rb HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 69.5.21.178 - - [23/Apr/2026:07:59:19 +0800] "GET /database.yml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 69.5.21.178 - - [23/Apr/2026:08:00:01 +0800] "GET /application.yml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" 69.5.21.178 - - [23/Apr/2026:08:00:02 +0800] "GET /web.config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 69.5.21.178 - - [23/Apr/2026:08:02:21 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 74.248.147.253 - - [23/Apr/2026:19:47:43 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:43 +0800] "GET /eFpU3yHnriNNLtvdefault.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:44 +0800] "GET /485.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:44 +0800] "GET /drykl.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:44 +0800] "GET /xxx.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:44 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:45 +0800] "GET /xminie.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:45 +0800] "GET /av.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:45 +0800] "GET /x=34.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:45 +0800] "GET /insta.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:46 +0800] "GET /eetu.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:46 +0800] "GET /xxa.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:46 +0800] "GET /a1.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:48 +0800] "GET /zxcs.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:48 +0800] "GET /s1.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:48 +0800] "GET /wp-kz.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:49 +0800] "GET /wmore1.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:49 +0800] "GET /saorix1.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:49 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:49 +0800] "GET /lib.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:50 +0800] "GET /file-kikikoko.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:50 +0800] "GET /wp-kikikoko.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:50 +0800] "GET /ganja.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:51 +0800] "GET /doc.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:51 +0800] "GET /sad821.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:51 +0800] "GET /sad8210.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:51 +0800] "GET /BDKR28WP.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:52 +0800] "GET //man.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:52 +0800] "GET /aboute.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:52 +0800] "GET /ayk.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:52 +0800] "GET /wps.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:53 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:53 +0800] "GET /12.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:53 +0800] "GET /acp.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:53 +0800] "GET /link.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:54 +0800] "GET /dass.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:54 +0800] "GET /ws66.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:54 +0800] "GET /db.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:54 +0800] "GET /ws81.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:55 +0800] "GET /r2.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:47:55 +0800] "GET /tiny.php HTTP/1.1" 403 199 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:09 +0800] "GET /ws80.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:09 +0800] "GET //f6.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:10 +0800] "GET /roksad1.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:10 +0800] "GET /fone1.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:10 +0800] "GET /config.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:11 +0800] "GET /xltt.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:11 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:11 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:11 +0800] "GET /xff.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:12 +0800] "GET /wglum1.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:12 +0800] "GET /ng.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:12 +0800] "GET /wgift1.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:13 +0800] "GET /xynz.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:13 +0800] "GET /wp-admin/images/admin.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:13 +0800] "GET /press.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:13 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:14 +0800] "GET /rh.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:14 +0800] "GET /d.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:14 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:15 +0800] "GET /view.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:15 +0800] "GET /cilus.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:15 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:15 +0800] "GET /doc.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:16 +0800] "GET /xper1.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:16 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:16 +0800] "GET /gelio1.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:17 +0800] "GET /ws82.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:17 +0800] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 403 199 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:18 +0800] "GET /wp-class.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:18 +0800] "GET /layout.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:18 +0800] "GET /ws85.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:18 +0800] "GET /zogy1.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:19 +0800] "GET /state.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:19 +0800] "GET /ss.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:19 +0800] "GET /error_log.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:19 +0800] "GET /mifta.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:20 +0800] "GET /ws57.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:20 +0800] "GET /ws86.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:20 +0800] "GET /fs.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:20 +0800] "GET /packsin1.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:21 +0800] "GET /xs.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:21 +0800] "GET /img.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:21 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:22 +0800] "GET /maxro.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:22 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:22 +0800] "GET /wp-block.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:23 +0800] "GET /aa.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:23 +0800] "GET /areak1.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:23 +0800] "GET /sallu.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:24 +0800] "GET /tiny2.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:24 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:24 +0800] "GET /gz.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:24 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:25 +0800] "GET /gecko.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:25 +0800] "GET /aevly.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:25 +0800] "GET /ws68.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:25 +0800] "GET /pp.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:26 +0800] "GET /yuzuru1.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:26 +0800] "GET /son1.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:26 +0800] "GET /tx79.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:26 +0800] "GET /ws80.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:27 +0800] "GET /ws84.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:27 +0800] "GET /ws61.php HTTP/1.1" 403 261 "-" "-" 74.248.147.253 - - [23/Apr/2026:19:48:27 +0800] "GET /class-wp-image.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:05 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:05 +0800] "GET /gpt-sh.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:05 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:06 +0800] "GET /aevly.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:06 +0800] "GET /ta0ol.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:06 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:07 +0800] "GET /users.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:07 +0800] "GET /public/vx.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:07 +0800] "GET /elp.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:07 +0800] "GET /zc-243.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:08 +0800] "GET /bkyac.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:08 +0800] "GET /wziar1.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:08 +0800] "GET /public/oLEzRVqmJJPFSucdefault.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:08 +0800] "GET /7logs.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:09 +0800] "GET /n3yUmQ6Q9xwQ8ocdefault.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:09 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:09 +0800] "GET /ctex1.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:10 +0800] "GET /lb.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:10 +0800] "GET /cilus.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:10 +0800] "GET /mh.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:11 +0800] "GET /fone1.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:11 +0800] "GET /auth.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:11 +0800] "GET /ortasekerli1.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:11 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:12 +0800] "GET /wp-png.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:12 +0800] "GET /tx79.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:12 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:12 +0800] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:13 +0800] "GET /bfil.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:13 +0800] "GET /abrand.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:13 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:14 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:14 +0800] "GET /amwxl.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:14 +0800] "GET /wmore1.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:14 +0800] "GET /userfuns.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:15 +0800] "GET /menu.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:15 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:15 +0800] "GET /saorix1.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:16 +0800] "GET /byypas.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:16 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:16 +0800] "GET /gptsh.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:16 +0800] "GET /0x.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:17 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:17 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:17 +0800] "GET /bolt.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:18 +0800] "GET /koiy.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:18 +0800] "GET /albin.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:18 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:18 +0800] "GET /sa.php7 HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:19 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:19 +0800] "GET /wp9.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:19 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:20 +0800] "GET /wp5.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:20 +0800] "GET /yuzuru1.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:20 +0800] "GET /file61.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:20 +0800] "GET /Cap.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:21 +0800] "GET /tfm.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:21 +0800] "GET /xper1.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:21 +0800] "GET /t00l.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:21 +0800] "GET /casp1.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:22 +0800] "GET /acc.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:22 +0800] "GET /asasx.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:22 +0800] "GET /xltt.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:23 +0800] "GET /packsin1.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:23 +0800] "GET /press.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:23 +0800] "GET /ws78.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:23 +0800] "GET /motu.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:24 +0800] "GET /hplfuns.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:24 +0800] "GET /xa.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:24 +0800] "GET /8573.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:24 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:25 +0800] "GET /666.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:25 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:25 +0800] "GET /prosellers8.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:25 +0800] "GET /shop.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:26 +0800] "GET /ww.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:26 +0800] "GET /fsjzs.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:26 +0800] "GET /cwclass.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:27 +0800] "GET /edit-tags.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:27 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:27 +0800] "GET /zoper1.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:27 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:28 +0800] "GET /ai.php HTTP/1.1" 403 261 "-" "-" 135.225.39.191 - - [23/Apr/2026:22:18:28 +0800] "GET /jga.php HTTP/1.1" 403 261 "-" "-" 74.7.175.183 - - [24/Apr/2026:01:06:52 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.243.243 - - [24/Apr/2026:01:06:53 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.241.131 - - [24/Apr/2026:03:34:31 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.227.191 - - [24/Apr/2026:03:34:32 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 72.146.33.63 - - [24/Apr/2026:04:03:04 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:04 +0800] "GET /gpt-sh.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:04 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:04 +0800] "GET /aevly.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:05 +0800] "GET /ta0ol.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:05 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:05 +0800] "GET /users.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:06 +0800] "GET /public/vx.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:06 +0800] "GET /elp.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:06 +0800] "GET /zc-243.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:06 +0800] "GET /bkyac.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:07 +0800] "GET /wziar1.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:07 +0800] "GET /public/oLEzRVqmJJPFSucdefault.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:07 +0800] "GET /7logs.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:07 +0800] "GET /n3yUmQ6Q9xwQ8ocdefault.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:08 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:08 +0800] "GET /ctex1.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:08 +0800] "GET /lb.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:08 +0800] "GET /cilus.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:09 +0800] "GET /mh.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:09 +0800] "GET /fone1.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:09 +0800] "GET /auth.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:10 +0800] "GET /ortasekerli1.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:10 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:10 +0800] "GET /wp-png.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:11 +0800] "GET /tx79.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:11 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:11 +0800] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:12 +0800] "GET /bfil.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:12 +0800] "GET /abrand.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:12 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:13 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:13 +0800] "GET /amwxl.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:13 +0800] "GET /wmore1.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:14 +0800] "GET /userfuns.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:14 +0800] "GET /menu.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:14 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:14 +0800] "GET /saorix1.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:15 +0800] "GET /byypas.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:15 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:15 +0800] "GET /gptsh.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:16 +0800] "GET /0x.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:16 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:16 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:16 +0800] "GET /bolt.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:17 +0800] "GET /koiy.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:17 +0800] "GET /albin.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:17 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:18 +0800] "GET /sa.php7 HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:18 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:18 +0800] "GET /wp9.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:18 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:19 +0800] "GET /wp5.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:19 +0800] "GET /yuzuru1.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:19 +0800] "GET /file61.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:19 +0800] "GET /Cap.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:20 +0800] "GET /tfm.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:20 +0800] "GET /xper1.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:20 +0800] "GET /t00l.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:21 +0800] "GET /casp1.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:21 +0800] "GET /acc.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:21 +0800] "GET /asasx.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:22 +0800] "GET /xltt.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:22 +0800] "GET /packsin1.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:22 +0800] "GET /press.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:22 +0800] "GET /ws78.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:23 +0800] "GET /motu.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:23 +0800] "GET /hplfuns.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:23 +0800] "GET /xa.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:24 +0800] "GET /8573.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:24 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:25 +0800] "GET /666.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:25 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:25 +0800] "GET /prosellers8.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:25 +0800] "GET /shop.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:26 +0800] "GET /ww.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:26 +0800] "GET /fsjzs.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:26 +0800] "GET /cwclass.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:27 +0800] "GET /edit-tags.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:27 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:28 +0800] "GET /zoper1.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:28 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:28 +0800] "GET /ai.php HTTP/1.1" 403 261 "-" "-" 72.146.33.63 - - [24/Apr/2026:04:03:29 +0800] "GET /jga.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:47 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:47 +0800] "GET /aboutc.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:47 +0800] "GET /new4.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:47 +0800] "GET /hroxw.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:48 +0800] "GET /wp-blogs.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:48 +0800] "GET /set.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:48 +0800] "GET /lib.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:49 +0800] "GET /public/vx.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:49 +0800] "GET /ws57.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:49 +0800] "GET /domains.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:49 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:50 +0800] "GET /166.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:50 +0800] "GET /term.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:50 +0800] "GET /666.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:50 +0800] "GET /tt.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:51 +0800] "GET /sid3.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:51 +0800] "GET /66.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:51 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:51 +0800] "GET /jga.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:52 +0800] "GET /wp-blog-header.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:52 +0800] "GET /bmi.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:52 +0800] "GET /byypas.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:53 +0800] "GET /wp-content/radio.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:53 +0800] "GET /wp-png.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:53 +0800] "GET /wen.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:53 +0800] "GET /plugin-install.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:54 +0800] "GET /ioxi001.PhP7 HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:54 +0800] "GET /wp-kikikoko.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:54 +0800] "GET /hplfuns.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:54 +0800] "GET /shell.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:55 +0800] "GET /new.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:55 +0800] "GET /wp-admin/network/edit.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:55 +0800] "GET /ws48.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:56 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:56 +0800] "GET /dass.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:56 +0800] "GET /wp-p2r3q9c8k4.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:56 +0800] "GET /ok.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:57 +0800] "GET /eetu.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:57 +0800] "GET /ws66.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:57 +0800] "GET /file61.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:57 +0800] "GET /asd.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:58 +0800] "GET /xx.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:58 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:58 +0800] "GET /cu.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:59 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:59 +0800] "GET /mh.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:59 +0800] "GET /Jcrop.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:03:59 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:00 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:00 +0800] "GET /bnm.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:00 +0800] "GET /ws80.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:01 +0800] "GET /wp-admin/network/users.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:01 +0800] "GET /s.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:01 +0800] "GET /tymn.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:01 +0800] "GET /wp-links-opml.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:02 +0800] "GET /wp5.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:02 +0800] "GET /ms.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:02 +0800] "GET /wp-access.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:02 +0800] "GET /wp-class-atom.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:03 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:03 +0800] "GET /press.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:03 +0800] "GET /900.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:03 +0800] "GET //wp-links-opml.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:04 +0800] "GET /jk.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:04 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:05 +0800] "GET /aa.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:05 +0800] "GET /mini.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:05 +0800] "GET /fs.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:06 +0800] "GET /mode.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:06 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:06 +0800] "GET /wp-block.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:06 +0800] "GET /ws88.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:07 +0800] "GET /adoms.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:07 +0800] "GET /plugin-editor.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:07 +0800] "GET /8573.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:07 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:07 +0800] "GET /t.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:08 +0800] "GET /wp-admin/css/bolt.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:08 +0800] "GET /profile.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:08 +0800] "GET /gaza.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:08 +0800] "GET /kj.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:09 +0800] "GET /aboute.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:09 +0800] "GET /ws82.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:10 +0800] "GET /edit.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:10 +0800] "GET /yw5bi63u.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:10 +0800] "GET /tool.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:10 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:11 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:11 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:11 +0800] "GET /mk.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:11 +0800] "GET /gettest.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:12 +0800] "GET /a4.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:12 +0800] "GET /retu11.PhP7 HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:13 +0800] "GET //rip.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:13 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:13 +0800] "GET /zoo.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:14 +0800] "GET /admlo.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:14 +0800] "GET /gcqoa.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:14 +0800] "GET /xxx.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:14 +0800] "GET /b.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:15 +0800] "GET /grsiuk.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:16 +0800] "GET /wp-class-api.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:16 +0800] "GET /bolt.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:17 +0800] "GET /gifclass.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:17 +0800] "GET /ccs.php HTTP/1.1" 403 261 "-" "-" 4.212.93.21 - - [24/Apr/2026:06:04:17 +0800] "GET /first.php HTTP/1.1" 403 261 "-" "-" 20.215.253.96 - - [24/Apr/2026:08:23:09 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.215.253.96 - - [24/Apr/2026:08:23:09 +0800] "GET /wp-post-data.php HTTP/1.1" 403 261 "-" "-" 20.215.253.96 - - [24/Apr/2026:08:23:09 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "-" 20.215.253.96 - - [24/Apr/2026:08:23:10 +0800] "GET /1index.php HTTP/1.1" 403 261 "-" "-" 20.215.253.96 - - [24/Apr/2026:08:23:10 +0800] "GET /kcs.php HTTP/1.1" 403 261 "-" "-" 20.215.253.96 - - [24/Apr/2026:08:23:10 +0800] "GET /Marvins.php HTTP/1.1" 403 261 "-" "-" 20.215.253.96 - - [24/Apr/2026:08:23:10 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "-" 20.215.253.96 - - [24/Apr/2026:08:23:11 +0800] "GET /file2.php HTTP/1.1" 403 261 "-" "-" 13.135.71.144 - - [24/Apr/2026:08:54:56 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:70.0) Gecko/20100101 Firefox/70.0" 178.128.118.191 - - [24/Apr/2026:08:55:05 +0800] "GET /license.txt HTTP/1.1" 403 261 "-" "python-requests/2.27.1" 204.76.203.25 - - [24/Apr/2026:15:06:58 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 138.246.253.24 - - [24/Apr/2026:17:12:23 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 168.144.114.18 - - [24/Apr/2026:17:19:24 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 168.144.114.18 - - [24/Apr/2026:17:19:24 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "http://test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 168.144.114.18 - - [24/Apr/2026:17:19:25 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 168.144.114.18 - - [24/Apr/2026:17:19:28 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "https://test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 195.178.110.241 - - [24/Apr/2026:19:43:08 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 138.246.253.24 - - [24/Apr/2026:20:36:08 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 104.28.161.163 - - [24/Apr/2026:21:02:47 +0800] "GET /style.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 61.111.250.85 - - [24/Apr/2026:23:10:22 +0800] "GET /.git/HEAD HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" 61.111.250.85 - - [24/Apr/2026:23:10:22 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" 61.111.250.85 - - [24/Apr/2026:23:10:22 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" 216.45.61.243 - - [25/Apr/2026:01:12:04 +0800] "GET / HTTP/1.1" 403 261 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 51.107.77.218 - - [25/Apr/2026:02:26:57 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 199 "-" "-" 51.107.77.218 - - [25/Apr/2026:02:26:58 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 199 "-" "-" 51.107.77.218 - - [25/Apr/2026:02:27:00 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 199 "-" "-" 51.107.77.218 - - [25/Apr/2026:02:27:01 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 199 "-" "-" 20.214.230.200 - - [25/Apr/2026:03:03:53 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:53 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:53 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:53 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:53 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:54 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:54 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:54 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:54 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:54 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:54 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:54 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:54 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:55 +0800] "GET /wp-admin/user.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:55 +0800] "GET /wp-conf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:55 +0800] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:55 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:55 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:55 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:55 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:56 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:56 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:56 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:56 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:56 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:56 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:56 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:58 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:58 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:58 +0800] "GET /kbfr.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:58 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:58 +0800] "GET /chosen.php?p= HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:59 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:59 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:59 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:59 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:59 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:03:59 +0800] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:04:00 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:04:00 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:04:00 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:04:00 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:04:00 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:04:00 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:04:01 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:04:01 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:04:01 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.214.230.200 - - [25/Apr/2026:03:04:01 +0800] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.7.175.183 - - [25/Apr/2026:04:51:42 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 107.172.58.36 - - [25/Apr/2026:05:18:25 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:71.0) Gecko/20100101 Firefox/71.0" 107.172.58.36 - - [25/Apr/2026:05:18:31 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:71.0) Gecko/20100101 Firefox/71.0" 74.7.241.131 - - [25/Apr/2026:07:00:55 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 3.65.40.162 - - [25/Apr/2026:07:04:52 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.182 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:28 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:28 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:29 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:29 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:29 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:29 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:29 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:29 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:29 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:29 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:29 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:30 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:30 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:30 +0800] "GET /wp-admin/user.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:30 +0800] "GET /wp-conf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:30 +0800] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:30 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:30 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:30 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:31 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:31 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:31 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:31 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:31 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:31 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:31 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:31 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:32 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:32 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:32 +0800] "GET /kbfr.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:32 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:32 +0800] "GET /chosen.php?p= HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:32 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:32 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:32 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:33 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:33 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:33 +0800] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:33 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:33 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:34 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:34 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:34 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:34 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:34 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:34 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:34 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.236.85 - - [25/Apr/2026:11:06:34 +0800] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 51.107.77.218 - - [25/Apr/2026:12:17:47 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:48 +0800] "GET /png.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:48 +0800] "GET /wp-x7.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:48 +0800] "GET /ms.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:49 +0800] "GET /AxAo.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:49 +0800] "GET /siln.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:49 +0800] "GET /ext.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:50 +0800] "GET /about3.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:50 +0800] "GET /raw.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:50 +0800] "GET /puvil.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:50 +0800] "GET /NewFile.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:51 +0800] "GET /tmpls.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:51 +0800] "GET /n3.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:51 +0800] "GET /wp-aaa.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:51 +0800] "GET /wp-kd4xalrg7m.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:52 +0800] "GET /mo.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:52 +0800] "GET /file5.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:52 +0800] "GET /wp-xrm.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:53 +0800] "GET /wp-asudo.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:53 +0800] "GET /wdone1.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:53 +0800] "GET /file3.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:54 +0800] "GET /G-In.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:54 +0800] "GET /blox.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:54 +0800] "GET /wgift1.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:55 +0800] "GET //zwso.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:55 +0800] "GET /gelap.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:55 +0800] "GET /a1vx.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:56 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:56 +0800] "GET /lv.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:56 +0800] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:57 +0800] "GET /oylki.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:57 +0800] "GET /about25.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:57 +0800] "GET /path.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:58 +0800] "GET /r4f_1.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:58 +0800] "GET /wp1.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:58 +0800] "GET /33.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:59 +0800] "GET /wp-gr.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:59 +0800] "GET /mans.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:17:59 +0800] "GET /file30.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:01 +0800] "GET /zxin.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:01 +0800] "GET //dropdown.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:02 +0800] "GET /wp-at.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:02 +0800] "GET /hk.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:02 +0800] "GET /lco.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:03 +0800] "GET /fun.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:03 +0800] "GET /0x.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:03 +0800] "GET /huyaa.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:04 +0800] "GET /te.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:04 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:04 +0800] "GET /wp-2019.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:04 +0800] "GET /X57.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:05 +0800] "GET /ah25.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:05 +0800] "GET /grsiuk.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:05 +0800] "GET /z.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:06 +0800] "GET /file4.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:06 +0800] "GET /sk25_1.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:06 +0800] "GET /usep.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:07 +0800] "GET /vx.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:07 +0800] "GET /v4.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:07 +0800] "GET /wp4.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:07 +0800] "GET //wp.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:08 +0800] "GET /mamzi.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:11 +0800] "GET /wpls.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:12 +0800] "GET /xrp.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:12 +0800] "GET /v2.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:12 +0800] "GET /wp-acc.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:12 +0800] "GET /333.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:13 +0800] "GET /031.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:13 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:13 +0800] "GET /wp-xx.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:13 +0800] "GET /testo.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:14 +0800] "GET /row.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:14 +0800] "GET /555.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:14 +0800] "GET /wp-conflg.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:14 +0800] "GET /xqq.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:15 +0800] "GET /jmfi2.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:15 +0800] "GET /wp-Blogs.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:15 +0800] "GET /card.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:16 +0800] "GET /mds.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:16 +0800] "GET /hey.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:16 +0800] "GET /samll.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:16 +0800] "GET //h.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:17 +0800] "GET /bdroot.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:17 +0800] "GET /class-config.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:17 +0800] "GET /new.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:17 +0800] "GET /444.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:18 +0800] "GET /bnm.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:18 +0800] "GET /himu.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:18 +0800] "GET /ccou.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:18 +0800] "GET /wp-access.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:19 +0800] "GET /hans.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:19 +0800] "GET /lgr.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:20 +0800] "GET /an7.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:21 +0800] "GET /file1.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:21 +0800] "GET /luxe.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:21 +0800] "GET /wp_ok.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:21 +0800] "GET /wp-admin/maint/wp-is.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:22 +0800] "GET /inde.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:22 +0800] "GET /xtt.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:22 +0800] "GET //autoload_classmap.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:18:23 +0800] "GET /we2.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:04 +0800] "GET /file88.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:04 +0800] "GET /xenon1337.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:04 +0800] "GET /1index.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:05 +0800] "GET //edit.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:05 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:05 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:06 +0800] "GET /error.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:06 +0800] "GET /file32.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:06 +0800] "GET /cvrvk.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:06 +0800] "GET /class-wp.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:07 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:07 +0800] "GET /hello.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:07 +0800] "GET /wp-links-opml.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:08 +0800] "GET /lti.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:08 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:08 +0800] "GET /shellalfa.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:08 +0800] "GET /bless11.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:09 +0800] "GET /xmu.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:09 +0800] "GET /shelp.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:09 +0800] "GET /xda.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:09 +0800] "GET /pucci.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:10 +0800] "GET /app.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:10 +0800] "GET //x.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:10 +0800] "GET /sys.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:11 +0800] "GET /wp-act.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:11 +0800] "GET /ol.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:11 +0800] "GET /mws.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:12 +0800] "GET /file9.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:12 +0800] "GET /ff1.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:12 +0800] "GET /doc.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:13 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:13 +0800] "GET /06.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:13 +0800] "GET //shell20211028.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:14 +0800] "GET /owl.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:14 +0800] "GET /hook.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:14 +0800] "GET /file59.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:14 +0800] "GET /ok.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:15 +0800] "GET /less.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:15 +0800] "GET /clirp.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:15 +0800] "GET /domains.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:15 +0800] "GET /wkdec.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:16 +0800] "GET /lo.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:16 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:16 +0800] "GET /bless5.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:17 +0800] "GET /wp-blog.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:17 +0800] "GET /wp-load.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:17 +0800] "GET /sid3.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:17 +0800] "GET /wp-cliner.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:18 +0800] "GET /v3.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:18 +0800] "GET /acp.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:18 +0800] "GET /sbhu.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:19 +0800] "GET /ton.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:19 +0800] "GET /forbidals.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:19 +0800] "GET /zzkhe.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:19 +0800] "GET /wp-xm.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:20 +0800] "GET /cc13.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:20 +0800] "GET /yas.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:21 +0800] "GET /tires.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:21 +0800] "GET /asas.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:21 +0800] "GET /class19.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:21 +0800] "GET /yellow.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:22 +0800] "GET /wuasr.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:22 +0800] "GET /lala.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:22 +0800] "GET /sko.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:23 +0800] "GET /new4.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:23 +0800] "GET /myfile.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:24 +0800] "GET /fileas.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:24 +0800] "GET /system.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:24 +0800] "GET /wp-update.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:24 +0800] "GET /wolv2.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:25 +0800] "GET /class-db.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:25 +0800] "GET /wp-sx10.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:25 +0800] "GET /xml.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:26 +0800] "GET /moon3.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:26 +0800] "GET /db.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:26 +0800] "GET /xy.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:26 +0800] "GET /revealability.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:27 +0800] "GET /tox.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:27 +0800] "GET /packed.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:27 +0800] "GET /lib.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:28 +0800] "GET /ccu.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:28 +0800] "GET /ffile.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:28 +0800] "GET /class.1.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:29 +0800] "GET /popo.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:29 +0800] "GET /academy.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:29 +0800] "GET /wp-xml.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:29 +0800] "GET /layout.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:30 +0800] "GET /txets.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:30 +0800] "GET /Sanskrit.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:30 +0800] "GET /kikikoko.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:31 +0800] "GET /opts.php HTTP/1.1" 403 261 "-" "-" 51.107.77.218 - - [25/Apr/2026:12:19:31 +0800] "GET /ouh.php HTTP/1.1" 403 261 "-" "-" 74.7.175.183 - - [25/Apr/2026:15:47:02 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.175.183 - - [25/Apr/2026:19:08:01 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.241.131 - - [25/Apr/2026:19:10:13 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 51.120.80.114 - - [26/Apr/2026:00:39:17 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:17 +0800] "GET /BDKR28WP.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:17 +0800] "GET /card.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:18 +0800] "GET /av.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:18 +0800] "GET /wp-lacoto.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:18 +0800] "GET /wp-kikikoko.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:18 +0800] "GET /ganja.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:19 +0800] "GET /eetu.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:19 +0800] "GET /wp-X1s2e6h3p7.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:19 +0800] "GET /dragonshell.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:19 +0800] "GET /samll.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:20 +0800] "GET /G-In.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:20 +0800] "GET /aj11.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:20 +0800] "GET /tires.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:21 +0800] "GET /xroot.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:21 +0800] "GET /tea.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:21 +0800] "GET /uwu.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:22 +0800] "GET /aios-bootstrap.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:22 +0800] "GET /one.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:22 +0800] "GET /006.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:23 +0800] "GET /kikikoko.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:23 +0800] "GET /2026w.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:24 +0800] "GET /11.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:24 +0800] "GET /amxloxxr.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:24 +0800] "GET /qhupyoon.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:24 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:25 +0800] "GET /fs.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:25 +0800] "GET /6ap7e.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:25 +0800] "GET /cilus.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:26 +0800] "GET /link.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:26 +0800] "GET /fone1.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:26 +0800] "GET /zogy1.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:28 +0800] "GET /zoper1.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:28 +0800] "GET /atkno.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:28 +0800] "GET /de.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:29 +0800] "GET /insta.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:29 +0800] "GET /wpxl.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:29 +0800] "GET /admlo.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:29 +0800] "GET /f5.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:30 +0800] "GET /ptanf.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:30 +0800] "GET /ctex1.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:30 +0800] "GET /gelio1.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:30 +0800] "GET /ah25.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:31 +0800] "GET /w.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:31 +0800] "GET /axe.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:31 +0800] "GET /index0.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:32 +0800] "GET /wp-01ul.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:32 +0800] "GET /e3.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:32 +0800] "GET /fkohd.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:33 +0800] "GET /ws78.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:33 +0800] "GET /ws80.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:33 +0800] "GET /zo.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:33 +0800] "GET /xy.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:34 +0800] "GET /masks.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:34 +0800] "GET //man.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:34 +0800] "GET /xfun.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:34 +0800] "GET /xxx.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:35 +0800] "GET /vv.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:35 +0800] "GET /wpconf.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:35 +0800] "GET /lib.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:35 +0800] "GET /wp-zx.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:36 +0800] "GET /000.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:36 +0800] "GET /mar.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:36 +0800] "GET /iov.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:37 +0800] "GET /jodohghi.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:37 +0800] "GET /rendi59.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:37 +0800] "GET /rivasqup.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:37 +0800] "GET /mga.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:38 +0800] "GET /dshtv.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:38 +0800] "GET /sym403.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:38 +0800] "GET /temp1.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:38 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:39 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:39 +0800] "GET /Sanskrit.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:39 +0800] "GET /bbny.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:39 +0800] "GET /ggb.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:40 +0800] "GET /zhw.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:40 +0800] "GET /casp1.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:40 +0800] "GET /ftde.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:41 +0800] "GET /lov.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:41 +0800] "GET /knw.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:41 +0800] "GET /fi.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:41 +0800] "GET /jlex.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:42 +0800] "GET /wp-k7djufwez2.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:42 +0800] "GET /wp-tiroto.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:42 +0800] "GET /son.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:42 +0800] "GET /99.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:43 +0800] "GET /bal.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:43 +0800] "GET /filefuns.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:43 +0800] "GET /ay.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:43 +0800] "GET /options.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:44 +0800] "GET /wp-includes/theme-compat/options.php HTTP/1.1" 403 199 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:45 +0800] "GET /d.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:45 +0800] "GET /1a.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:46 +0800] "GET /rh.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:46 +0800] "GET /file-kikikoko.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:46 +0800] "GET /cu.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:47 +0800] "GET /tramuibs.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:47 +0800] "GET /19.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:47 +0800] "GET /test1.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:47 +0800] "GET /bpxrn.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:48 +0800] "GET /a1.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:48 +0800] "GET /ws37.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:48 +0800] "GET /sky.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:48 +0800] "GET /bojcdooq.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:49 +0800] "GET /zdd.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:49 +0800] "GET /133.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:49 +0800] "GET /jq.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:49 +0800] "GET /cro.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:50 +0800] "GET /wwx.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:50 +0800] "GET /trx24.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:50 +0800] "GET /blox.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:51 +0800] "GET /berax.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:51 +0800] "GET /bkxzo.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:51 +0800] "GET /cdxadmin.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:52 +0800] "GET /dfre.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:52 +0800] "GET /sko.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:52 +0800] "GET /shorw.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:52 +0800] "GET /shelp.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:53 +0800] "GET /seyv.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:53 +0800] "GET /sad821.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:53 +0800] "GET /sad8210.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:53 +0800] "GET /sad8rd1.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:54 +0800] "GET /saxzgf5.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:54 +0800] "GET /saxzw9t.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:54 +0800] "GET /sder5252u.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:54 +0800] "GET /sderty5u.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:55 +0800] "GET /hilk.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:55 +0800] "GET /miso.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:55 +0800] "GET /yuzuru1.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:55 +0800] "GET /checkout.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:56 +0800] "GET /fictioner.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:56 +0800] "GET /ortasekerli1.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:56 +0800] "GET /xxa.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:57 +0800] "GET /file6.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:57 +0800] "GET /wp-asyn-upload.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:57 +0800] "GET /redixsx.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:57 +0800] "GET /alpha.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:58 +0800] "GET /bc.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:58 +0800] "GET /67.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:58 +0800] "GET /1mrX.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:58 +0800] "GET /x402.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:59 +0800] "GET /485.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:59 +0800] "GET /drykl.php HTTP/1.1" 403 261 "-" "-" 51.120.80.114 - - [26/Apr/2026:00:39:59 +0800] "GET /xxx.php HTTP/1.1" 403 261 "-" "-" 185.198.240.154 - - [26/Apr/2026:00:53:14 +0800] "GET /bless.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.198.240.154 - - [26/Apr/2026:00:53:14 +0800] "GET /O-Simple.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.198.240.154 - - [26/Apr/2026:00:53:15 +0800] "GET /lock360.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.198.240.154 - - [26/Apr/2026:00:53:15 +0800] "GET /zwso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.198.240.154 - - [26/Apr/2026:00:53:15 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.198.240.154 - - [26/Apr/2026:00:53:16 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.198.240.154 - - [26/Apr/2026:00:53:16 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.198.240.154 - - [26/Apr/2026:00:53:16 +0800] "GET /mah.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.198.240.154 - - [26/Apr/2026:00:53:17 +0800] "GET /.wp/wso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.198.240.154 - - [26/Apr/2026:00:53:17 +0800] "GET /core.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.198.240.154 - - [26/Apr/2026:00:53:17 +0800] "GET /robots.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.198.240.154 - - [26/Apr/2026:00:53:17 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.198.240.154 - - [26/Apr/2026:00:53:18 +0800] "GET /mini.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.198.240.154 - - [26/Apr/2026:00:53:18 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.198.240.154 - - [26/Apr/2026:00:53:18 +0800] "GET /file5.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.198.240.154 - - [26/Apr/2026:00:53:19 +0800] "GET /ahax.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.198.240.154 - - [26/Apr/2026:00:53:19 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.198.240.154 - - [26/Apr/2026:00:53:19 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.198.240.154 - - [26/Apr/2026:00:53:20 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.198.240.154 - - [26/Apr/2026:00:53:20 +0800] "GET /update/f35.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.198.240.154 - - [26/Apr/2026:00:53:21 +0800] "GET /wp-content/hello.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.198.240.154 - - [26/Apr/2026:00:53:21 +0800] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.198.240.154 - - [26/Apr/2026:00:53:21 +0800] "GET /themes/zMousse/otuz1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.198.240.154 - - [26/Apr/2026:00:53:21 +0800] "GET /wp-content/edit-wolf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.198.240.154 - - [26/Apr/2026:00:53:22 +0800] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.198.240.154 - - [26/Apr/2026:00:53:22 +0800] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.198.240.154 - - [26/Apr/2026:00:53:22 +0800] "GET /images/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.198.240.154 - - [26/Apr/2026:00:53:23 +0800] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.198.240.154 - - [26/Apr/2026:00:53:23 +0800] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.198.240.154 - - [26/Apr/2026:00:53:24 +0800] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.198.240.154 - - [26/Apr/2026:00:53:24 +0800] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.198.240.154 - - [26/Apr/2026:00:53:24 +0800] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.198.240.154 - - [26/Apr/2026:00:53:25 +0800] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 20.220.225.64 - - [26/Apr/2026:01:05:26 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:26 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:26 +0800] "GET /zwso.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:26 +0800] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:27 +0800] "GET /class19.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:27 +0800] "GET /class20.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:27 +0800] "GET /admin.php?p= HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:27 +0800] "GET /randkeyword.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:27 +0800] "GET /fwe.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:28 +0800] "GET /images/m.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:28 +0800] "GET /g.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:28 +0800] "GET /tx1.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:28 +0800] "GET /xv.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:29 +0800] "GET /x56.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:29 +0800] "GET /htaccess.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:29 +0800] "GET /readme.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:29 +0800] "GET /x50.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:30 +0800] "GET /fv.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:30 +0800] "GET /file.php? HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:30 +0800] "GET /lsd.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:30 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:30 +0800] "GET /wsd.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:31 +0800] "GET /gtc.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:31 +0800] "GET /atx.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:31 +0800] "GET /z60.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:31 +0800] "GET /403.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:32 +0800] "GET /m.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:32 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:32 +0800] "GET /wp-admin/maint/about.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:32 +0800] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:33 +0800] "GET /click.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:33 +0800] "GET /install.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:33 +0800] "GET /lv.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:33 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:33 +0800] "GET /css.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:34 +0800] "GET /cong.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:34 +0800] "GET /wp-includes/images/wp-login.php HTTP/1.1" 403 199 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:34 +0800] "GET /cong.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:35 +0800] "GET /w.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:35 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:35 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:35 +0800] "GET /0x.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:36 +0800] "GET /css.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:36 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:36 +0800] "GET /wp-content/index.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:36 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:36 +0800] "GET /wp-admin/maint/maint.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:37 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:37 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:37 +0800] "GET /autoload_classmap.php?p= HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:37 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:37 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:38 +0800] "GET /alfa.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:38 +0800] "GET /themes/twentytwentytwo/index.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:38 +0800] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:38 +0800] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:39 +0800] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:39 +0800] "GET /manager.php?p= HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:39 +0800] "GET /item.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:39 +0800] "GET /plugins/Cache/footer.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:40 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:40 +0800] "GET /mail.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:40 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:40 +0800] "GET /sx.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:40 +0800] "GET /wp-admin/maint/admin.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:41 +0800] "GET /alfa.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:41 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:41 +0800] "GET /byp.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:41 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:41 +0800] "GET /.well-known/index.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:42 +0800] "GET /wp-admin/network/plugins.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:42 +0800] "GET /wp-admin/about.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:42 +0800] "GET /gmo.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:43 +0800] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 199 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:43 +0800] "GET /css/index.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:44 +0800] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 403 199 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:44 +0800] "GET /wp-content/themes/about.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:44 +0800] "GET /filemanager/dialog.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:45 +0800] "GET /wp-admin/maint/index.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:45 +0800] "GET /wp-includes/customize/about.php HTTP/1.1" 403 199 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:45 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:46 +0800] "GET /uploads/autoload_classmap.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:46 +0800] "GET /wp-includes/style-engine/about.php HTTP/1.1" 403 199 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:47 +0800] "GET /ww1.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:47 +0800] "GET /about/function.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:47 +0800] "GET /admin/function.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:48 +0800] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 404 16 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:49 +0800] "GET /css/colors/blue/index.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:49 +0800] "GET /security.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:50 +0800] "GET /wp-admin/user/about.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:50 +0800] "GET /wp-admin/js/index.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:50 +0800] "GET /wp-content/upgrade/about.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:50 +0800] "GET /wp-includes/assets/index.php HTTP/1.1" 403 199 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:51 +0800] "GET /wp-content/radio.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:51 +0800] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:51 +0800] "GET /.well-known/admin.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:52 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:52 +0800] "GET /wp-content/plugins/admin.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:52 +0800] "GET /wp-content/themes/twentytwentytwo/index.php?p= HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:52 +0800] "GET /.well-known/log.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:53 +0800] "GET /class.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:53 +0800] "GET /bless5.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:53 +0800] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 403 199 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:54 +0800] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 403 199 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:55 +0800] "GET /lock360.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:55 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:55 +0800] "GET /ioxi-o1.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:55 +0800] "GET /juuuu.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:55 +0800] "GET /ha.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:56 +0800] "GET /gg.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:56 +0800] "GET /we2.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:56 +0800] "GET /04.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:56 +0800] "GET /333.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:57 +0800] "GET /520.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:57 +0800] "GET /ar.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:57 +0800] "GET /x.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:57 +0800] "GET /xx.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:58 +0800] "GET /gifclass4.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:58 +0800] "GET /2clas.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:58 +0800] "GET /ave.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:58 +0800] "GET /wrt.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:59 +0800] "GET /bibil.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:59 +0800] "GET /radio.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:05:59 +0800] "GET /files.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:00 +0800] "GET /file7.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:00 +0800] "GET /gifclass.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:00 +0800] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:00 +0800] "GET /nox.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:01 +0800] "GET /file48.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:01 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:01 +0800] "GET /class9.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:01 +0800] "GET /la.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:02 +0800] "GET /bless11.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:02 +0800] "GET /ccou.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:02 +0800] "GET /ton.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:02 +0800] "GET /403.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:02 +0800] "GET /file9.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:03 +0800] "GET /ac.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:03 +0800] "GET /new4.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:03 +0800] "GET /pop.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:04 +0800] "GET /az.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:04 +0800] "GET /xaz.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:04 +0800] "GET /up4.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:04 +0800] "GET /1aa.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:05 +0800] "GET /elp.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:05 +0800] "GET /wtz.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:05 +0800] "GET /galex.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:06 +0800] "GET /xb.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:06 +0800] "GET /ova.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:06 +0800] "GET /vx.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:06 +0800] "GET /rh.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:07 +0800] "GET /plugins.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:07 +0800] "GET /users.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:07 +0800] "GET /admin.php?p= HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:07 +0800] "GET /profile.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:07 +0800] "GET /menu.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:08 +0800] "GET /sites.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:09 +0800] "GET /byp.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:10 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 20.220.225.64 - - [26/Apr/2026:01:06:10 +0800] "GET /mini.php HTTP/1.1" 403 261 "-" "-" 74.249.155.150 - - [26/Apr/2026:05:36:08 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:08 +0800] "GET /wp-content/uploads/2024/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:09 +0800] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:09 +0800] "GET /wp-corn-sample.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:09 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:09 +0800] "GET /wp-admin/js/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:09 +0800] "GET /wp-admin/css/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:10 +0800] "GET /server.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:10 +0800] "GET /wp-includes/Requests/library/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:10 +0800] "GET /wp-admin/js/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:10 +0800] "GET /wso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:10 +0800] "GET /wp-includes/images/crystal/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:11 +0800] "GET /wp-file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:11 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:11 +0800] "GET /wk/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:11 +0800] "GET /wp-admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:12 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:12 +0800] "GET /wp-includes/block-bindings/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:12 +0800] "GET /xmrlpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:12 +0800] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:15 +0800] "GET /wp-admin/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:15 +0800] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:15 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:17 +0800] "GET /css/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:17 +0800] "GET /wp-content/et-cache/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:17 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:18 +0800] "GET /wp-content/uploads/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:18 +0800] "GET /wp-content/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:18 +0800] "GET /wp-includes/js/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:20 +0800] "GET /wp-includes/rest-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:20 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:20 +0800] "GET /wp-includes/blocks/block/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:20 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:21 +0800] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:25 +0800] "GET /buy.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:26 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:26 +0800] "GET /wp-admin/images/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:26 +0800] "GET /about.PHP HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:26 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:26 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:27 +0800] "GET /wp-content/edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:27 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:27 +0800] "GET /wp-includes/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:29 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:29 +0800] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:29 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:30 +0800] "GET /test1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:30 +0800] "GET /wp-cron.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:31 +0800] "GET /wp-includes/block-supports/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:31 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:32 +0800] "GET /wp-content/1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.155.150 - - [26/Apr/2026:05:36:32 +0800] "GET /images/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:43 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:43 +0800] "GET /wp-content/uploads/2024/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:43 +0800] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:43 +0800] "GET /wp-corn-sample.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:44 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:44 +0800] "GET /wp-admin/js/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:44 +0800] "GET /wp-admin/css/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:44 +0800] "GET /server.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:44 +0800] "GET /wp-includes/Requests/library/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:45 +0800] "GET /wp-admin/js/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:45 +0800] "GET /wso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:45 +0800] "GET /wp-includes/images/crystal/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:45 +0800] "GET /wp-file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:45 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:46 +0800] "GET /wk/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:46 +0800] "GET /wp-admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:46 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:46 +0800] "GET /wp-includes/block-bindings/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:46 +0800] "GET /xmrlpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:47 +0800] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:48 +0800] "GET /wp-admin/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:48 +0800] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:48 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:48 +0800] "GET /css/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:48 +0800] "GET /wp-content/et-cache/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:49 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:49 +0800] "GET /wp-content/uploads/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:49 +0800] "GET /wp-content/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:51 +0800] "GET /wp-includes/js/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:51 +0800] "GET /wp-includes/rest-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:52 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:52 +0800] "GET /wp-includes/blocks/block/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:52 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:52 +0800] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:53 +0800] "GET /buy.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:53 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:53 +0800] "GET /wp-admin/images/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:54 +0800] "GET /about.PHP HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:54 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:54 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:54 +0800] "GET /wp-content/edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:56 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:56 +0800] "GET /wp-includes/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:57 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:57 +0800] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:57 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:58 +0800] "GET /test1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:58 +0800] "GET /wp-cron.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:58 +0800] "GET /wp-includes/block-supports/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:58 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:58 +0800] "GET /wp-content/1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.49.17 - - [26/Apr/2026:07:12:59 +0800] "GET /images/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 212.47.78.126 - - [26/Apr/2026:12:12:02 +0800] "GET / HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 212.47.78.126 - - [26/Apr/2026:12:12:03 +0800] "GET /wp-includes/css/buttons.css HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 212.47.78.126 - - [26/Apr/2026:12:12:03 +0800] "GET /media/system/js/core.js HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 74.7.241.131 - - [26/Apr/2026:13:46:30 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 88.151.33.240 - - [26/Apr/2026:21:42:39 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 88.151.33.240 - - [26/Apr/2026:21:42:41 +0800] "GET /secrets.json HTTP/1.1" 403 261 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Mobile/15E148 Safari/604.1" 88.151.33.240 - - [26/Apr/2026:21:42:41 +0800] "GET /backend/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0" 88.151.33.240 - - [26/Apr/2026:21:42:41 +0800] "GET /api/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0" 88.151.33.240 - - [26/Apr/2026:21:42:41 +0800] "GET /.openai/config.json HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 Edg/136.0.0.0" 88.151.33.240 - - [26/Apr/2026:21:42:41 +0800] "GET /config.json HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 88.151.33.240 - - [26/Apr/2026:21:42:41 +0800] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 88.151.33.240 - - [26/Apr/2026:21:42:41 +0800] "GET /.aws/credentials HTTP/1.1" 403 261 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Mobile/15E148 Safari/604.1" 88.151.33.240 - - [26/Apr/2026:21:42:41 +0800] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 88.151.33.240 - - [26/Apr/2026:21:42:41 +0800] "GET /serviceAccountKey.json HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 88.151.33.240 - - [26/Apr/2026:21:42:41 +0800] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 88.151.33.240 - - [26/Apr/2026:21:42:41 +0800] "GET /.anthropic/config.json HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 Edg/136.0.0.0" 88.151.33.240 - - [26/Apr/2026:21:42:41 +0800] "GET /laravel/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" 88.151.33.240 - - [26/Apr/2026:21:42:41 +0800] "GET /.env.backup HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 88.151.33.240 - - [26/Apr/2026:21:42:41 +0800] "GET /credentials.json HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 88.151.33.240 - - [26/Apr/2026:21:42:41 +0800] "GET /.env.bak HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 88.151.33.240 - - [26/Apr/2026:21:42:42 +0800] "GET /app/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0" 88.151.33.240 - - [26/Apr/2026:21:42:42 +0800] "GET /.cursor/mcp.json HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" 88.151.33.240 - - [26/Apr/2026:21:42:45 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 74.7.227.176 - - [26/Apr/2026:22:01:10 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.241.131 - - [26/Apr/2026:22:01:10 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.242.2 - - [26/Apr/2026:22:31:12 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.175.183 - - [26/Apr/2026:22:31:12 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 20.89.243.55 - - [27/Apr/2026:00:00:36 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:36 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:36 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:36 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:36 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:37 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:37 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:37 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:37 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:37 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:37 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:37 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:37 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:38 +0800] "GET /wp-admin/user.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:38 +0800] "GET /wp-conf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:38 +0800] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:38 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:38 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:38 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:38 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:38 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:39 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:39 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:39 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:39 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:39 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:39 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:39 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:39 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:40 +0800] "GET /kbfr.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:40 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:40 +0800] "GET /chosen.php?p= HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:40 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:40 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:40 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:40 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:40 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:41 +0800] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:41 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:41 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:41 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:41 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:42 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:42 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:42 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:42 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:42 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:00:00:42 +0800] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.232.184.88 - - [27/Apr/2026:01:12:11 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:12 +0800] "GET /fone1.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:12 +0800] "GET /ox.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:12 +0800] "GET /htto.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:12 +0800] "GET /gpt-sh.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:13 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:13 +0800] "GET /aevly.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:13 +0800] "GET /ta0ol.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:14 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:14 +0800] "GET /users.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:14 +0800] "GET /public/vx.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:14 +0800] "GET /elp.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:15 +0800] "GET /zc-243.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:15 +0800] "GET /bkyac.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:15 +0800] "GET /wziar1.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:15 +0800] "GET /public/oLEzRVqmJJPFSucdefault.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:17 +0800] "GET /7logs.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:17 +0800] "GET /n3yUmQ6Q9xwQ8ocdefault.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:17 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:18 +0800] "GET /ctex1.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:18 +0800] "GET /lb.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:18 +0800] "GET /cilus.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:18 +0800] "GET /mh.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:18 +0800] "GET //fone1.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:19 +0800] "GET /auth.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:19 +0800] "GET /ortasekerli1.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:19 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:19 +0800] "GET /wp-png.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:20 +0800] "GET /tx79.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:20 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:20 +0800] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:20 +0800] "GET /bfil.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:21 +0800] "GET /abrand.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:21 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:21 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:21 +0800] "GET /amwxl.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:22 +0800] "GET /wmore1.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:22 +0800] "GET /userfuns.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:22 +0800] "GET /menu.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:22 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:26 +0800] "GET /saorix1.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:26 +0800] "GET /byypas.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:26 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:26 +0800] "GET /gptsh.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:27 +0800] "GET /0x.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:27 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:27 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:27 +0800] "GET /bolt.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:28 +0800] "GET /koiy.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:28 +0800] "GET /albin.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:28 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:28 +0800] "GET /sa.php7 HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:28 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:29 +0800] "GET /wp9.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:29 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:29 +0800] "GET /wp5.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:29 +0800] "GET /yuzuru1.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:30 +0800] "GET /file61.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:30 +0800] "GET /Cap.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:30 +0800] "GET /tfm.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:31 +0800] "GET /xper1.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:31 +0800] "GET /t00l.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:31 +0800] "GET /casp1.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:31 +0800] "GET /acc.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:31 +0800] "GET /asasx.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:32 +0800] "GET /xltt.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:32 +0800] "GET /packsin1.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:33 +0800] "GET /press.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:34 +0800] "GET /ws78.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:34 +0800] "GET /motu.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:35 +0800] "GET /hplfuns.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:36 +0800] "GET /xa.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:36 +0800] "GET /8573.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:36 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:36 +0800] "GET /666.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:37 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:37 +0800] "GET /prosellers8.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:37 +0800] "GET /shop.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:38 +0800] "GET /ww.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:38 +0800] "GET /fsjzs.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:38 +0800] "GET /cwclass.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:38 +0800] "GET /edit-tags.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:39 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:39 +0800] "GET /zoper1.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:39 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:39 +0800] "GET /ai.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:40 +0800] "GET /jga.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:40 +0800] "GET /term.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:40 +0800] "GET /gk.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:41 +0800] "GET /xmu.php HTTP/1.1" 403 261 "-" "-" 4.232.184.88 - - [27/Apr/2026:01:12:41 +0800] "GET /sd.php HTTP/1.1" 403 261 "-" "-" 45.94.31.201 - - [27/Apr/2026:04:05:36 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 45.94.31.201 - - [27/Apr/2026:04:05:37 +0800] "GET /wordpress/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Arch Linux; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0" 45.94.31.201 - - [27/Apr/2026:04:05:37 +0800] "GET /old/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 23.95.96.140 - - [27/Apr/2026:05:15:36 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 23.95.96.140 - - [27/Apr/2026:05:15:42 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:39 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:39 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:39 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:39 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:39 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:39 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:40 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:40 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:40 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:40 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:40 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:40 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:40 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:41 +0800] "GET /wp-admin/user.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:41 +0800] "GET /wp-conf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:41 +0800] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:41 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:41 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:41 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:41 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:41 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:42 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:42 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:42 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:42 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:42 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:42 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:42 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:43 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:43 +0800] "GET /kbfr.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:43 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:43 +0800] "GET /chosen.php?p= HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:43 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:43 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:43 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:44 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:44 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:44 +0800] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:44 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:45 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:45 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:45 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:45 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:45 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:45 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:45 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:46 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.12.30 - - [27/Apr/2026:05:52:46 +0800] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:44 +0800] "GET /.tmb/cloud.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:44 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:44 +0800] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:45 +0800] "GET /.well-known/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:45 +0800] "GET /.well-known/pki-validation/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:45 +0800] "GET /.well-known/pki-validation/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:45 +0800] "GET //wp-2019.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:45 +0800] "GET //wp-content/themes/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:45 +0800] "GET /0.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:45 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:45 +0800] "GET /12.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:46 +0800] "GET /120f9.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:46 +0800] "GET /22.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:46 +0800] "GET /403.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:46 +0800] "GET /504.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:46 +0800] "GET /GOD.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:46 +0800] "GET /NewFile.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:46 +0800] "GET /aaa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:46 +0800] "GET /ab.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:47 +0800] "GET /about/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:47 +0800] "GET /admin/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:47 +0800] "GET /admin/index_upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:47 +0800] "GET /al.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:47 +0800] "GET /alfa-rex.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:47 +0800] "GET /alfanew.PHP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:47 +0800] "GET /alfanew.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:47 +0800] "GET /auth.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:48 +0800] "GET /b.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:48 +0800] "GET /b0.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:48 +0800] "GET /back.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:48 +0800] "GET /bala.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:48 +0800] "GET /baxa1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:48 +0800] "GET /buy.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:48 +0800] "GET /byp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:48 +0800] "GET /c.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:48 +0800] "GET /c99.php? HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:49 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:49 +0800] "GET /class-wp-lock.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:49 +0800] "GET /cong.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:49 +0800] "GET /content.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:49 +0800] "GET /control.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:49 +0800] "GET /cookie.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:49 +0800] "GET /credits.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:49 +0800] "GET /cron.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:50 +0800] "GET /css.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:50 +0800] "GET /css/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:50 +0800] "GET /data.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:50 +0800] "GET /disagreed.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:50 +0800] "GET /doc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:50 +0800] "GET /dropdown.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:50 +0800] "GET /ds.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:50 +0800] "GET /ee.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:51 +0800] "GET /en.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:51 +0800] "GET /error.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:51 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:51 +0800] "GET /favicon.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:51 +0800] "GET /feeds.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:51 +0800] "GET /files.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:51 +0800] "GET /files/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:51 +0800] "GET /flower.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:52 +0800] "GET /function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:52 +0800] "GET /functions.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:52 +0800] "GET /gecko-new.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:52 +0800] "GET /ggfi.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:53 +0800] "GET /gzak2w.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:54 +0800] "GET /hehe.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:55 +0800] "GET /hehehehe.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:55 +0800] "GET /help.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:55 +0800] "GET /images/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:55 +0800] "GET /index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:56 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:56 +0800] "GET /install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:56 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:56 +0800] "GET /mah/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:56 +0800] "GET /meta.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:56 +0800] "GET /moon.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:56 +0800] "GET /new.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:56 +0800] "GET /ova.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:57 +0800] "GET /print/bkindex.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:57 +0800] "GET /radio.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:57 +0800] "GET /randkeyword.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:57 +0800] "GET /room.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:57 +0800] "GET /sad/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:57 +0800] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:57 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:57 +0800] "GET /templates/beez3/1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.243.55 - - [27/Apr/2026:09:14:58 +0800] "GET /templates/beez3/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.28.152.248 - - [27/Apr/2026:09:28:05 +0800] "GET /style.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 20.220.233.65 - - [27/Apr/2026:09:45:25 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.220.233.65 - - [27/Apr/2026:09:45:25 +0800] "GET /file2.php HTTP/1.1" 403 261 "-" "-" 20.220.233.65 - - [27/Apr/2026:09:45:25 +0800] "GET /asus.php HTTP/1.1" 403 261 "-" "-" 20.220.233.65 - - [27/Apr/2026:09:45:26 +0800] "GET /environment.php HTTP/1.1" 403 261 "-" "-" 20.220.233.65 - - [27/Apr/2026:09:45:26 +0800] "GET /pinfo.php HTTP/1.1" 403 261 "-" "-" 20.220.233.65 - - [27/Apr/2026:09:45:26 +0800] "GET /aws.php HTTP/1.1" 403 261 "-" "-" 20.220.233.65 - - [27/Apr/2026:09:45:26 +0800] "GET /ayk.php HTTP/1.1" 403 261 "-" "-" 20.220.233.65 - - [27/Apr/2026:09:45:26 +0800] "GET /kcs.php?p= HTTP/1.1" 403 261 "-" "-" 20.220.233.65 - - [27/Apr/2026:09:45:27 +0800] "GET /setup.php HTTP/1.1" 403 261 "-" "-" 68.155.146.132 - - [27/Apr/2026:12:21:21 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:78.0) Gecko/20100101 Firefox/78.0" 47.128.112.140 - - [27/Apr/2026:14:09:55 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)" 110.249.201.70 - - [27/Apr/2026:14:14:09 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)" 198.55.100.210 - - [27/Apr/2026:14:14:33 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.3862.1098 Mobile Safari/537.36" 47.128.112.152 - - [27/Apr/2026:14:18:05 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)" 47.128.112.111 - - [27/Apr/2026:14:22:06 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)" 103.49.87.140 - - [27/Apr/2026:14:26:08 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 6 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.119 Mobile Safari/537.36 OPR/81.2.4292.78581" 103.76.237.253 - - [27/Apr/2026:14:26:10 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 8; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36" 103.73.53.71 - - [27/Apr/2026:14:26:11 +0800] "GET / HTTP/1.1" 403 261 "http://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (Linux; Android 14; Pixel 6 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.119 Mobile Safari/537.36 OPR/81.2.4292.78581" 154.17.98.66 - - [27/Apr/2026:14:26:14 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 8.0.0; SM-J330G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 EdgA/114.0.1823.74" 103.76.236.95 - - [27/Apr/2026:14:26:31 +0800] "GET / HTTP/1.1" 403 261 "https://thegreenscapecollective.com.au/" "Mozilla/5.0 (Linux; Android 8.0.0; SM-J330G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 EdgA/114.0.1823.74" 103.76.236.12 - - [27/Apr/2026:14:26:38 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 8; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36" 112.213.138.229 - - [27/Apr/2026:14:26:44 +0800] "GET / HTTP/1.1" 403 261 "https://thegreenscapecollective.com.au/" "Mozilla/5.0 (Linux; Android 8.0.0; SM-J330G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 EdgA/114.0.1823.74" 103.76.237.128 - - [27/Apr/2026:14:26:50 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 8.0.0; SM-J330G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 EdgA/114.0.1823.74" 103.73.53.19 - - [27/Apr/2026:14:26:51 +0800] "GET / HTTP/1.1" 403 261 "http://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Mobile Safari/537.36 OPR/84.0.0.0" 103.216.190.119 - - [27/Apr/2026:14:26:52 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 6 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.119 Mobile Safari/537.36 OPR/81.2.4292.78581" 112.213.166.251 - - [27/Apr/2026:14:26:54 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 7; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36" 186.68.226.29 - - [27/Apr/2026:14:26:58 +0800] "GET / HTTP/1.1" 403 261 "http://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (Linux; Android 8.0.0; SM-J330G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 EdgA/114.0.1823.74" 74.7.241.131 - - [28/Apr/2026:03:51:54 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.175.183 - - [28/Apr/2026:05:30:56 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 4.235.84.63 - - [28/Apr/2026:05:35:32 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:32 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:33 +0800] "GET /3369.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:33 +0800] "GET /mg.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:33 +0800] "GET /file-kikikoko.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:33 +0800] "GET /spawns.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:34 +0800] "GET /t3s.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:34 +0800] "GET /uwu.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:34 +0800] "GET /uwa.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:34 +0800] "GET /crgio.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:35 +0800] "GET /geforce.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:35 +0800] "GET /wp-load.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:35 +0800] "GET /77.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:35 +0800] "GET /.sghb.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:36 +0800] "GET /zoko.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:36 +0800] "GET /solo1.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:36 +0800] "GET /locales.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:36 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:37 +0800] "GET /pucci.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:37 +0800] "GET /wp-includes/blocks/details/ HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:37 +0800] "GET /.dj/index.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:38 +0800] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:38 +0800] "GET /.tmb/ HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:38 +0800] "GET /one.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:38 +0800] "GET /no20.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:39 +0800] "GET /yasnu.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:39 +0800] "GET //sl.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:39 +0800] "GET /vuln.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:39 +0800] "GET /wp-temp.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:40 +0800] "GET /wp-content/themes/twentytwentyfive/assets/ HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:40 +0800] "GET /wp-includes/blocks/buttons/ HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:40 +0800] "GET /class-bda.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:40 +0800] "GET /bhm.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:41 +0800] "GET /xmu.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:41 +0800] "GET /ref.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:41 +0800] "GET /wp-xme.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:41 +0800] "GET /adminer.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:42 +0800] "GET /ktfow.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:42 +0800] "GET /mode.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:42 +0800] "GET /2468.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:42 +0800] "GET //wp-admin/js/index.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:43 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:43 +0800] "GET /amdin.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:43 +0800] "GET /huya.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:44 +0800] "GET /puc.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:44 +0800] "GET //themes.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:44 +0800] "GET /ewp.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:44 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:45 +0800] "GET /xff.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:45 +0800] "GET /lupo.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:45 +0800] "GET /awa.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:45 +0800] "GET /popo.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:46 +0800] "GET /13.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:46 +0800] "GET /11.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:46 +0800] "GET /p.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:46 +0800] "GET //wp-includes/Requests/ HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:47 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:47 +0800] "GET //shell.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:47 +0800] "GET /seo.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:47 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:48 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:48 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:48 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:48 +0800] "GET /3.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:49 +0800] "GET /4.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:49 +0800] "GET /5.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:49 +0800] "GET /6.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:49 +0800] "GET /9.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:50 +0800] "GET /10.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:50 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:50 +0800] "GET /.well-known/nastar.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:51 +0800] "GET /2026w.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:51 +0800] "GET //xwpg.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:51 +0800] "GET /ass.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:51 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:52 +0800] "GET /no18.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:52 +0800] "GET /fine.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:52 +0800] "GET /hplfuns.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:52 +0800] "GET /xa.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:53 +0800] "GET //admin.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:53 +0800] "GET /inege.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:53 +0800] "GET /uuu.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:53 +0800] "GET /no1.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:54 +0800] "GET /w2025.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:54 +0800] "GET /fvvff.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:54 +0800] "GET /a2.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:54 +0800] "GET //edit.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:55 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:55 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:55 +0800] "GET /66.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:55 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:56 +0800] "GET //f6.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:56 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:56 +0800] "GET /style.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:57 +0800] "GET //av.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:57 +0800] "GET /wp-admin/css/bolt.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:57 +0800] "GET /wp-act.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:57 +0800] "GET /classwithtostring.php?p= HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:58 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:58 +0800] "GET /sbhu.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:58 +0800] "GET /wp-blog.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:59 +0800] "GET //wp-includes/js/jquery/ HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:59 +0800] "GET //wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:59 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:35:59 +0800] "GET //adminfuns.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:00 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:00 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:00 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:00 +0800] "GET //cgi-bin/index.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:01 +0800] "GET /fff.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:01 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:01 +0800] "GET /makeasmtp.php?p= HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:01 +0800] "GET //admin1.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:02 +0800] "GET //wp-includes/css/dist/ HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:02 +0800] "GET /BDKR28WP.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:02 +0800] "GET //wp-includes/l10n/ HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:03 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:03 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:03 +0800] "GET /wp-admin/js/fi.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:03 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:04 +0800] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:04 +0800] "GET /av.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:04 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:04 +0800] "GET //a1.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:05 +0800] "GET /update/f35.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:05 +0800] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 199 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:05 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:06 +0800] "GET //wp-includes/css/index.php?p= HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:06 +0800] "GET /wp-includes/SimplePie/ HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:06 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:06 +0800] "GET /bal.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:07 +0800] "GET /in.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:07 +0800] "GET /gssdd.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:07 +0800] "GET //cgi-bin/admin.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:07 +0800] "GET /bs1.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:08 +0800] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:08 +0800] "GET /axx.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:08 +0800] "GET /gettest.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:08 +0800] "GET /acp.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:09 +0800] "GET /file48.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:09 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:09 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:10 +0800] "GET /drykl.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:10 +0800] "GET /xxx.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:10 +0800] "GET /hypo.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:10 +0800] "GET /file18.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:11 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:11 +0800] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 261 "-" "-" 4.235.84.63 - - [28/Apr/2026:05:36:11 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "-" 195.178.110.186 - - [28/Apr/2026:05:55:20 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/122.0.0.0 Safari/537.36" 195.178.110.186 - - [28/Apr/2026:05:55:21 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 Chrome/122.0.0.0 Safari/537.36" 195.178.110.186 - - [28/Apr/2026:05:55:21 +0800] "POST /en HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/122.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:21 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:21 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:21 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:21 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:21 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:21 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:22 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:22 +0800] "GET /wp-content/plugins/twenty/login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:22 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:22 +0800] "GET /file3.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:22 +0800] "GET /wp-mail.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:22 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:22 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:23 +0800] "GET /.dj/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:23 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:23 +0800] "GET /php8.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:23 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:23 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:23 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:24 +0800] "GET /011i.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:24 +0800] "GET /edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:24 +0800] "GET /sid3.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:24 +0800] "GET /load.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:24 +0800] "GET /166.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:24 +0800] "GET /wp-mail.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:24 +0800] "GET /leaf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:25 +0800] "GET /grsiuk.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:25 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:25 +0800] "GET /fs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:25 +0800] "GET /ws38.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:25 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:25 +0800] "GET /classsmtps.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:25 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:26 +0800] "GET /CDX1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:26 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:26 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:26 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:26 +0800] "GET /css.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:26 +0800] "GET /php.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:27 +0800] "GET /wp-Blogs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:27 +0800] "GET /wp-content/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:27 +0800] "GET /wp-content/plugins/beteng88/ws83.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:27 +0800] "GET /ws83.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:27 +0800] "GET /file61.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:27 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:27 +0800] "GET /y.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:28 +0800] "GET /akcc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:28 +0800] "GET /wp-admin/user/12.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:28 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:28 +0800] "GET /term.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:28 +0800] "GET /666.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:28 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:28 +0800] "GET /wp-config-sample.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:29 +0800] "GET /log.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:29 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:29 +0800] "GET /aa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:29 +0800] "GET /bolt.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:29 +0800] "GET /x.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:29 +0800] "GET /jga.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:29 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:30 +0800] "GET /vx.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:30 +0800] "GET /ws77.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:30 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:30 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:30 +0800] "GET /wp-content/plugins/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:30 +0800] "GET /asd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:31 +0800] "GET /default.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:31 +0800] "GET /gettest.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:31 +0800] "GET /install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:31 +0800] "GET /tfm.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:31 +0800] "GET /ws81.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:31 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:31 +0800] "GET /t.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:32 +0800] "GET /wp-admin/maint/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:32 +0800] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:32 +0800] "GET /a.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:32 +0800] "GET /a1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:32 +0800] "GET /onclickfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:32 +0800] "GET /w.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:32 +0800] "GET /wp-admin/maint/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:33 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:33 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:33 +0800] "GET /.info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:33 +0800] "GET /config.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:33 +0800] "GET /item.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:33 +0800] "GET /m.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [28/Apr/2026:06:27:33 +0800] "GET /rh.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 68.155.146.132 - - [28/Apr/2026:09:24:31 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:43 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:44 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:44 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:44 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:45 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:45 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:46 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:46 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:46 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:46 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:47 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:47 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:47 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:47 +0800] "GET /wp-admin/user.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:48 +0800] "GET /wp-conf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:48 +0800] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:48 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:48 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:50 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:50 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:51 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:51 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:51 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:51 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:52 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:52 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:52 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:53 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:53 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:53 +0800] "GET /kbfr.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:53 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:54 +0800] "GET /chosen.php?p= HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:54 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:54 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:54 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:55 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:55 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:55 +0800] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:56 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:57 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:57 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:57 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:57 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:58 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:58 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:58 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:58 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.158.40.223 - - [28/Apr/2026:09:33:59 +0800] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:57 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:57 +0800] "GET /wp-content/uploads/2024/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:57 +0800] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:57 +0800] "GET /wp-corn-sample.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:57 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:57 +0800] "GET /wp-admin/js/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:57 +0800] "GET /wp-admin/css/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:57 +0800] "GET /server.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:57 +0800] "GET /wp-includes/Requests/library/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:57 +0800] "GET /wp-admin/js/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:57 +0800] "GET /wso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:57 +0800] "GET /wp-includes/images/crystal/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:57 +0800] "GET /wp-file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:57 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:57 +0800] "GET /wk/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:57 +0800] "GET /wp-admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:57 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:57 +0800] "GET /wp-includes/block-bindings/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /xmrlpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /wp-admin/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /css/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /wp-content/et-cache/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /wp-content/uploads/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /wp-content/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /wp-includes/js/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /wp-includes/rest-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /wp-includes/blocks/block/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /buy.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /wp-admin/images/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /about.PHP HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /wp-content/edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /wp-includes/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /test1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /wp-cron.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /wp-includes/block-supports/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /wp-content/1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.75.199.23 - - [28/Apr/2026:12:08:58 +0800] "GET /images/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.63.97.106 - - [28/Apr/2026:18:31:55 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:31:55 +0800] "GET /wk/index.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:31:55 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:31:55 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:31:57 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:31:57 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:31:57 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:31:58 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:31:58 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:31:58 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:31:58 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:31:59 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:31:59 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:00 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:00 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:00 +0800] "GET /wp-admin/user/index.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:01 +0800] "GET /wp-conf.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:01 +0800] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:01 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:01 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:02 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:02 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:02 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:02 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:02 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:03 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:03 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:03 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:03 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:04 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:04 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:04 +0800] "GET /kbfr.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:04 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:04 +0800] "GET /chosen.php?p= HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:05 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:05 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:05 +0800] "GET /wp-includes/ HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:05 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:06 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:06 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:06 +0800] "GET /uploads/ HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:07 +0800] "GET /wp-admin/images/ HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:07 +0800] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 403 199 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:08 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:09 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:09 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:09 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:09 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:10 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:10 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:10 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:10 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:10 +0800] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:11 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:11 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:11 +0800] "GET /bless.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:11 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:12 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:12 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:12 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:12 +0800] "GET /aa.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:12 +0800] "GET /xmrlpc.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:13 +0800] "GET /class.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:13 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:13 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:13 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:14 +0800] "GET /aw.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:14 +0800] "GET /bb.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:14 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:14 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:15 +0800] "GET /test1.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:15 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:15 +0800] "GET /css/autoload_classmap.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:15 +0800] "GET /fx.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:16 +0800] "GET /gelay.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:16 +0800] "GET /god4m.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:18 +0800] "GET /mari.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:18 +0800] "GET /moon.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:18 +0800] "GET /o.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:18 +0800] "GET /tmp.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:19 +0800] "GET /wp-admin/js/ HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:19 +0800] "GET /wp-admin/a.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:19 +0800] "GET /wp-admin/alfa.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:19 +0800] "GET /wp-admin/css/colors HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:19 +0800] "GET /wp-admin/js/widgets/ HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:20 +0800] "GET /wp-admin/network/index.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:20 +0800] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:22 +0800] "GET /wp-includes/IXR/test1.php HTTP/1.1" 403 199 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:23 +0800] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 403 199 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:25 +0800] "GET /wp-content/themes/ HTTP/1.1" 403 261 "-" "-" 20.63.97.106 - - [28/Apr/2026:18:32:25 +0800] "GET /wp-includes/ID3/ HTTP/1.1" 403 261 "-" "-" 31.40.204.223 - - [28/Apr/2026:18:44:42 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 5.0.2; SM-T530NU Build/LRX22G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.84 Safari/537.36" 31.40.204.223 - - [28/Apr/2026:18:44:44 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 5.0.2; SM-T530NU Build/LRX22G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.84 Safari/537.36" 45.94.31.201 - - [28/Apr/2026:18:49:23 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0" 45.94.31.201 - - [28/Apr/2026:18:49:23 +0800] "GET /wordpress/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:147.0) Gecko/20100101 Firefox/147.0" 45.94.31.201 - - [28/Apr/2026:18:49:23 +0800] "GET /old/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" 74.7.175.183 - - [28/Apr/2026:20:14:11 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 172.96.8.89 - - [28/Apr/2026:23:18:26 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64)" 172.96.8.89 - - [28/Apr/2026:23:18:28 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64)" 172.96.8.89 - - [28/Apr/2026:23:18:28 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64)" 172.96.8.89 - - [28/Apr/2026:23:18:29 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64)" 74.7.227.21 - - [28/Apr/2026:23:26:08 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.241.131 - - [28/Apr/2026:23:26:09 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 34.74.130.71 - - [29/Apr/2026:04:41:47 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:21 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:21 +0800] "GET /png.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:21 +0800] "GET /wp-x7.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:21 +0800] "GET /ms.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:21 +0800] "GET /AxAo.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:22 +0800] "GET /siln.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:22 +0800] "GET /ext.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:22 +0800] "GET /about3.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:22 +0800] "GET /raw.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:23 +0800] "GET /puvil.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:23 +0800] "GET /NewFile.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:23 +0800] "GET /tmpls.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:23 +0800] "GET /n3.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:23 +0800] "GET /wp-aaa.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:24 +0800] "GET /wp-kd4xalrg7m.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:24 +0800] "GET /mo.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:24 +0800] "GET /file5.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:24 +0800] "GET /wp-xrm.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:24 +0800] "GET /wp-asudo.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:25 +0800] "GET /wdone1.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:25 +0800] "GET /file3.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:25 +0800] "GET /G-In.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:25 +0800] "GET /blox.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:25 +0800] "GET /wgift1.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:26 +0800] "GET //zwso.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:26 +0800] "GET /gelap.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:26 +0800] "GET /a1vx.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:26 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:28 +0800] "GET /lv.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:28 +0800] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:28 +0800] "GET /oylki.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:28 +0800] "GET /about25.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:29 +0800] "GET /path.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:29 +0800] "GET /r4f_1.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:29 +0800] "GET /wp1.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:29 +0800] "GET /33.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:30 +0800] "GET /wp-gr.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:30 +0800] "GET /mans.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:30 +0800] "GET /file30.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:30 +0800] "GET /zxin.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:30 +0800] "GET //dropdown.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:31 +0800] "GET /wp-at.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:31 +0800] "GET /hk.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:31 +0800] "GET /lco.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:31 +0800] "GET /fun.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:31 +0800] "GET /0x.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:32 +0800] "GET /huyaa.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:32 +0800] "GET /te.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:32 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:32 +0800] "GET /wp-2019.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:32 +0800] "GET /X57.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:33 +0800] "GET /ah25.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:33 +0800] "GET /grsiuk.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:33 +0800] "GET /z.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:33 +0800] "GET /file4.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:33 +0800] "GET /sk25_1.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:34 +0800] "GET /usep.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:34 +0800] "GET /vx.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:34 +0800] "GET /v4.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:34 +0800] "GET /wp4.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:35 +0800] "GET //wp.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:35 +0800] "GET /mamzi.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:35 +0800] "GET /wpls.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:35 +0800] "GET /xrp.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:35 +0800] "GET /v2.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:36 +0800] "GET /wp-acc.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:36 +0800] "GET /333.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:36 +0800] "GET /031.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:36 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:36 +0800] "GET /wp-xx.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:37 +0800] "GET /testo.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:37 +0800] "GET /row.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:37 +0800] "GET /555.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:37 +0800] "GET /wp-conflg.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:37 +0800] "GET /xqq.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:38 +0800] "GET /jmfi2.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:38 +0800] "GET /wp-Blogs.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:38 +0800] "GET /card.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:38 +0800] "GET /mds.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:38 +0800] "GET /hey.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:39 +0800] "GET /samll.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:39 +0800] "GET //h.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:39 +0800] "GET /bdroot.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:39 +0800] "GET /class-config.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:40 +0800] "GET /new.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:40 +0800] "GET /444.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:40 +0800] "GET /bnm.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:40 +0800] "GET /himu.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:40 +0800] "GET /ccou.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:41 +0800] "GET /wp-access.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:41 +0800] "GET /hans.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:41 +0800] "GET /lgr.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:41 +0800] "GET /an7.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:41 +0800] "GET /file1.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:42 +0800] "GET /luxe.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:42 +0800] "GET /wp_ok.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:42 +0800] "GET /wp-admin/maint/wp-is.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:42 +0800] "GET /inde.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:42 +0800] "GET /xtt.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:43 +0800] "GET //autoload_classmap.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:43 +0800] "GET /we2.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:43 +0800] "GET /zicgg.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:43 +0800] "GET /pouhg.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:44 +0800] "GET /file88.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:44 +0800] "GET /xenon1337.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:44 +0800] "GET /1index.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:44 +0800] "GET //edit.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:45 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:45 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:45 +0800] "GET /error.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:45 +0800] "GET /file32.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:45 +0800] "GET /cvrvk.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:46 +0800] "GET /class-wp.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:46 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:46 +0800] "GET /hello.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:46 +0800] "GET /wp-links-opml.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:46 +0800] "GET /lti.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:47 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:48 +0800] "GET /shellalfa.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:48 +0800] "GET /bless11.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:49 +0800] "GET /xmu.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:49 +0800] "GET /shelp.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:49 +0800] "GET /xda.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:49 +0800] "GET /pucci.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:50 +0800] "GET /app.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:50 +0800] "GET //x.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:50 +0800] "GET /sys.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:50 +0800] "GET /wp-act.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:50 +0800] "GET /ol.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:51 +0800] "GET /mws.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:51 +0800] "GET /file9.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:51 +0800] "GET /ff1.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:51 +0800] "GET /doc.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:51 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:52 +0800] "GET /06.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:52 +0800] "GET //shell20211028.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:52 +0800] "GET /owl.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:52 +0800] "GET /hook.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:54 +0800] "GET /file59.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:54 +0800] "GET /ok.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:54 +0800] "GET /less.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:55 +0800] "GET /clirp.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:55 +0800] "GET /domains.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:55 +0800] "GET /wkdec.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:55 +0800] "GET /lo.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:55 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:56 +0800] "GET /bless5.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:56 +0800] "GET /wp-blog.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:56 +0800] "GET /wp-load.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:56 +0800] "GET /sid3.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:56 +0800] "GET /wp-cliner.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:57 +0800] "GET /v3.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:57 +0800] "GET /acp.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:57 +0800] "GET /sbhu.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:57 +0800] "GET /ton.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:57 +0800] "GET /forbidals.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:58 +0800] "GET /zzkhe.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:58 +0800] "GET /wp-xm.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:58 +0800] "GET /cc13.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:58 +0800] "GET /yas.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:59 +0800] "GET /tires.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:59 +0800] "GET /asas.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:59 +0800] "GET /class19.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:59 +0800] "GET /yellow.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:23:59 +0800] "GET /wuasr.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:00 +0800] "GET /lala.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:00 +0800] "GET /sko.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:00 +0800] "GET /new4.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:00 +0800] "GET /myfile.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:00 +0800] "GET /fileas.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:01 +0800] "GET /system.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:01 +0800] "GET /wp-update.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:01 +0800] "GET /wolv2.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:01 +0800] "GET /class-db.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:01 +0800] "GET /wp-sx10.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:02 +0800] "GET /xml.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:02 +0800] "GET /moon3.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:02 +0800] "GET /db.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:02 +0800] "GET /xy.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:03 +0800] "GET /revealability.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:03 +0800] "GET /tox.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:03 +0800] "GET /packed.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:03 +0800] "GET /lib.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:03 +0800] "GET /ccu.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:04 +0800] "GET /ffile.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:04 +0800] "GET /class.1.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:04 +0800] "GET /popo.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:04 +0800] "GET /academy.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:04 +0800] "GET /wp-xml.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:05 +0800] "GET /layout.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:05 +0800] "GET /txets.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:05 +0800] "GET /Sanskrit.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:05 +0800] "GET /kikikoko.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:05 +0800] "GET /opts.php HTTP/1.1" 403 261 "-" "-" 40.85.240.33 - - [29/Apr/2026:06:24:06 +0800] "GET /ouh.php HTTP/1.1" 403 261 "-" "-" 74.7.241.39 - - [29/Apr/2026:19:39:00 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.175.183 - - [29/Apr/2026:19:39:00 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 5.175.178.6 - - [29/Apr/2026:20:22:40 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 85.204.70.102 - - [29/Apr/2026:20:59:14 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.102 - - [29/Apr/2026:20:59:15 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.102 - - [29/Apr/2026:20:59:15 +0800] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.102 - - [29/Apr/2026:20:59:15 +0800] "GET /xmlrpc.php?rsd HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.102 - - [29/Apr/2026:20:59:15 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.102 - - [29/Apr/2026:20:59:15 +0800] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.102 - - [29/Apr/2026:20:59:16 +0800] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.102 - - [29/Apr/2026:20:59:16 +0800] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.102 - - [29/Apr/2026:20:59:16 +0800] "GET /website/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.102 - - [29/Apr/2026:20:59:16 +0800] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.102 - - [29/Apr/2026:20:59:17 +0800] "GET /news/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.102 - - [29/Apr/2026:20:59:17 +0800] "GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.102 - - [29/Apr/2026:20:59:17 +0800] "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.102 - - [29/Apr/2026:20:59:17 +0800] "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.102 - - [29/Apr/2026:20:59:18 +0800] "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.102 - - [29/Apr/2026:20:59:18 +0800] "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.102 - - [29/Apr/2026:20:59:18 +0800] "GET /media/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.102 - - [29/Apr/2026:20:59:18 +0800] "GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.102 - - [29/Apr/2026:20:59:19 +0800] "GET /site/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.102 - - [29/Apr/2026:20:59:19 +0800] "GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.204.70.102 - - [29/Apr/2026:20:59:19 +0800] "GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 74.7.241.131 - - [29/Apr/2026:23:24:10 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 8.229.92.107 - - [30/Apr/2026:00:25:11 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "-" 20.215.248.255 - - [30/Apr/2026:01:24:34 +0800] "GET /xleet.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:01:24:35 +0800] "GET /xmrlpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:01:24:35 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:01:24:35 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:01:24:35 +0800] "GET /a.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:01:24:36 +0800] "GET /aa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:01:24:36 +0800] "GET /aaa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:01:24:36 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:01:24:37 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:01:24:37 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:01:24:37 +0800] "GET /admin/controller/extension/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:01:24:37 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:01:24:38 +0800] "GET /alfa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:01:24:38 +0800] "GET /anonse/lock360.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:01:24:38 +0800] "GET /archive.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:01:24:39 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:01:24:39 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:01:24:39 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:01:24:39 +0800] "GET /config.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:01:24:40 +0800] "GET /cookie.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:01:24:40 +0800] "GET /core.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:01:24:40 +0800] "GET /css/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:01:24:41 +0800] "GET /default.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:01:24:41 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:01:24:41 +0800] "GET /dropdown.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:01:24:42 +0800] "GET /edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:01:24:42 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:02:03:17 +0800] "GET /xleet.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:02:03:17 +0800] "GET /xmrlpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:02:03:18 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:02:03:18 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:02:03:18 +0800] "GET /a.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:02:03:18 +0800] "GET /aa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:02:03:19 +0800] "GET /aaa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:02:03:19 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:02:03:19 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:02:03:20 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:02:03:20 +0800] "GET /admin/controller/extension/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:02:03:20 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:02:03:20 +0800] "GET /alfa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:02:03:21 +0800] "GET /anonse/lock360.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:02:03:21 +0800] "GET /archive.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:02:03:21 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:02:03:21 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:02:03:22 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:02:03:22 +0800] "GET /config.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:02:03:22 +0800] "GET /cookie.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:02:03:22 +0800] "GET /core.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:02:03:23 +0800] "GET /css/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:02:03:23 +0800] "GET /default.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:02:03:23 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:02:03:23 +0800] "GET /dropdown.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:02:03:24 +0800] "GET /edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:02:03:24 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:08:12:08 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:08:12:09 +0800] "GET /functions.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:08:12:09 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:08:12:09 +0800] "GET /images/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:08:12:09 +0800] "GET /index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:08:12:10 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:08:12:10 +0800] "GET /install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:08:12:10 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:08:12:11 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:08:12:11 +0800] "GET /lock360.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:08:12:11 +0800] "GET /meta.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:08:12:11 +0800] "GET /new.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:08:12:12 +0800] "GET /packed.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:08:12:12 +0800] "GET /randkeyword.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:08:12:12 +0800] "GET /root.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:08:12:12 +0800] "GET /system.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:08:12:13 +0800] "GET /system_log.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:08:12:13 +0800] "GET /theme.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:08:12:13 +0800] "GET /updates.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:08:12:14 +0800] "GET /wp-admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:08:12:14 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:08:12:14 +0800] "GET /wp-includes/fonts/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:08:12:15 +0800] "GET /wp-index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:08:12:15 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.215.248.255 - - [30/Apr/2026:08:12:15 +0800] "GET /wso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.246.253.24 - - [30/Apr/2026:08:29:44 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 138.246.253.24 - - [30/Apr/2026:08:37:36 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:08:52:07 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:08:52:08 +0800] "GET /functions.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:08:52:08 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:08:52:08 +0800] "GET /images/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:08:52:09 +0800] "GET /index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:08:52:09 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:08:52:09 +0800] "GET /install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:08:52:09 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:08:52:10 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:08:52:10 +0800] "GET /lock360.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:08:52:10 +0800] "GET /meta.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:08:52:10 +0800] "GET /new.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:08:52:11 +0800] "GET /packed.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:08:52:11 +0800] "GET /randkeyword.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:08:52:11 +0800] "GET /root.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:08:52:11 +0800] "GET /system.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:08:52:12 +0800] "GET /system_log.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:08:52:12 +0800] "GET /theme.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:08:52:12 +0800] "GET /updates.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:08:52:14 +0800] "GET /wp-admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:08:52:14 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:08:52:14 +0800] "GET /wp-includes/fonts/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:08:52:14 +0800] "GET /wp-index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:08:52:15 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.251.113.2 - - [30/Apr/2026:08:52:15 +0800] "GET /wso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 34.91.213.89 - - [30/Apr/2026:16:35:15 +0800] "GET / HTTP/1.1" 403 261 "-" "Scrapy/2.13.4 (+https://scrapy.org)" 74.7.175.183 - - [30/Apr/2026:20:27:07 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.227.21 - - [01/May/2026:02:31:12 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.241.131 - - [01/May/2026:02:31:13 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 176.65.148.161 - - [01/May/2026:15:53:12 +0800] "HEAD / HTTP/1.1" 403 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 88.151.32.178 - - [01/May/2026:21:01:44 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0" 88.151.32.178 - - [01/May/2026:21:01:46 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0" 74.7.241.131 - - [01/May/2026:22:28:01 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 35.197.145.213 - - [01/May/2026:22:58:02 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "-" 74.7.175.183 - - [02/May/2026:00:44:20 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.241.39 - - [02/May/2026:00:44:21 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 172.121.221.1 - - [02/May/2026:02:34:09 +0800] "HEAD / HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 172.121.221.1 - - [02/May/2026:02:34:10 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 172.121.216.2 - - [02/May/2026:02:34:12 +0800] "HEAD / HTTP/1.1" 403 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.105 Version/17.0 Mobile/15E148 Safari/604.1" 172.121.216.2 - - [02/May/2026:02:34:13 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/120.0.2210.105 Version/17.0 Mobile/15E148 Safari/604.1" 50.118.248.140 - - [02/May/2026:02:34:30 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; Konqueror/3; Linux)" 50.118.248.140 - - [02/May/2026:02:34:31 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; Konqueror/3; Linux)" 50.118.248.140 - - [02/May/2026:02:34:32 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; Konqueror/3; Linux)" 172.121.218.125 - - [02/May/2026:02:34:57 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/121.0" 172.121.218.125 - - [02/May/2026:02:34:58 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/121.0" 172.121.218.125 - - [02/May/2026:02:34:59 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/121.0" 85.137.49.10 - - [02/May/2026:03:06:00 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 209.50.191.57 - - [02/May/2026:09:18:14 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.108 Safari/537.36" 45.3.35.112 - - [02/May/2026:09:18:48 +0800] "GET /s3cmd.ini HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 8.0.0; SM-G935F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 157.245.217.10 - - [02/May/2026:15:24:41 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 157.245.217.10 - - [02/May/2026:15:24:41 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "http://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 157.245.217.10 - - [02/May/2026:15:24:42 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 157.245.217.10 - - [02/May/2026:15:24:48 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "https://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 74.7.175.183 - - [02/May/2026:17:20:08 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 43.133.138.66 - - [02/May/2026:18:20:09 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 74.7.241.131 - - [02/May/2026:21:06:41 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 20.151.130.38 - - [02/May/2026:22:49:38 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:38 +0800] "GET /about8.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:39 +0800] "GET /olik.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:39 +0800] "GET /h.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:39 +0800] "GET /cong.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:39 +0800] "GET /.well-known/about.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:39 +0800] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 199 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:40 +0800] "GET /atika.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:40 +0800] "GET /xxl.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:40 +0800] "GET /uploat.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:41 +0800] "GET /wpxml.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:41 +0800] "GET /bob.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:41 +0800] "GET /spawns.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:41 +0800] "GET /t3s.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:42 +0800] "GET /wp-admin/css/ HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:42 +0800] "GET /x/ HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:42 +0800] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:42 +0800] "GET /configuration.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:43 +0800] "GET /wp-admin/js/ HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:43 +0800] "GET /uwu.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:43 +0800] "GET /uwa.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:43 +0800] "GET /crgio.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:43 +0800] "GET /geforce.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:44 +0800] "GET /wp-load.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:44 +0800] "GET /77.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:44 +0800] "GET /.sghb.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:44 +0800] "GET /zoko.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:45 +0800] "GET /solo1.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:45 +0800] "GET /locales.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:45 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:45 +0800] "GET /pucci.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:45 +0800] "GET /wp-includes/blocks/details/ HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:46 +0800] "GET /.dj/index.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:46 +0800] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:46 +0800] "GET /.tmb/ HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:46 +0800] "GET /one.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:46 +0800] "GET /no20.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:47 +0800] "GET /yasnu.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:47 +0800] "GET //sl.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:47 +0800] "GET /vuln.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:47 +0800] "GET /wp-temp.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:48 +0800] "GET /wp-content/themes/twentytwentyfive/assets/ HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:48 +0800] "GET /wp-includes/blocks/buttons/ HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:48 +0800] "GET /class-bda.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:48 +0800] "GET /bhm.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:48 +0800] "GET /xmu.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:49 +0800] "GET /goat.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:49 +0800] "GET /wp-xme.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:49 +0800] "GET /adminer.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:49 +0800] "GET /ktfow.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:49 +0800] "GET /mode.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:50 +0800] "GET /2468.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:50 +0800] "GET //wp-admin/js/index.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:50 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:50 +0800] "GET /amdin.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:51 +0800] "GET /huya.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:51 +0800] "GET /puc.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:51 +0800] "GET //themes.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:51 +0800] "GET /ewp.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:51 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:52 +0800] "GET /xff.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:52 +0800] "GET /lupo.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:52 +0800] "GET /awa.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:52 +0800] "GET /popo.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:52 +0800] "GET /13.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:53 +0800] "GET /tews.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:53 +0800] "GET /moshou.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:53 +0800] "GET /xeaq.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:53 +0800] "GET /up2.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:54 +0800] "GET /11.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:54 +0800] "GET /p.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:54 +0800] "GET //wp-includes/Requests/ HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:54 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:54 +0800] "GET //shell.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:55 +0800] "GET /seo.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:55 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:55 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:55 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:55 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:56 +0800] "GET /3.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:56 +0800] "GET /4.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:56 +0800] "GET /5.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:56 +0800] "GET /6.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:56 +0800] "GET /cjfuns.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:57 +0800] "GET /class.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:57 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:57 +0800] "GET /.well-known/nastar.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:57 +0800] "GET /2026w.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:49:58 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:00 +0800] "GET /no18.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:00 +0800] "GET /fine.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:00 +0800] "GET /hplfuns.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:00 +0800] "GET /xa.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:00 +0800] "GET //admin.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:01 +0800] "GET /inege.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:01 +0800] "GET /classgoto24.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:01 +0800] "GET /no1.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:01 +0800] "GET /w2025.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:02 +0800] "GET /fvvff.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:02 +0800] "GET //edit.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:02 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:02 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:02 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:03 +0800] "GET //f6.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:03 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:03 +0800] "GET /style.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:03 +0800] "GET //av.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:03 +0800] "GET /wp-admin/css/bolt.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:04 +0800] "GET /wp-act.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:04 +0800] "GET /classwithtostring.php?p= HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:04 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:04 +0800] "GET /sbhu.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:05 +0800] "GET /wp-blog.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:05 +0800] "GET //wp-includes/js/jquery/ HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:05 +0800] "GET //wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:05 +0800] "GET /8xyz.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:06 +0800] "GET //adminfuns.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:06 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:06 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:06 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:06 +0800] "GET //cgi-bin/index.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:07 +0800] "GET /fff.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:07 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:07 +0800] "GET /makeasmtp.php?p= HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:07 +0800] "GET //admin1.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:07 +0800] "GET //wp-includes/css/dist/ HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:08 +0800] "GET /BDKR28WP.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:08 +0800] "GET //wp-includes/l10n/ HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:08 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:08 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:08 +0800] "GET /wp-admin/js/fi.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:09 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:09 +0800] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:09 +0800] "GET /av.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:09 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:10 +0800] "GET //a1.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:10 +0800] "GET /update/f35.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:10 +0800] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 199 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:10 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:11 +0800] "GET //wp-includes/css/index.php?p= HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:11 +0800] "GET /wp-includes/SimplePie/ HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:11 +0800] "GET /bal.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:11 +0800] "GET /in.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:11 +0800] "GET /gssdd.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:12 +0800] "GET //cgi-bin/admin.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:12 +0800] "GET /bs1.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:12 +0800] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:12 +0800] "GET /gettest.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:13 +0800] "GET /file48.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:13 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:13 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:13 +0800] "GET /drykl.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:13 +0800] "GET /xxx.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:14 +0800] "GET /hypo.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:14 +0800] "GET /file18.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:14 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:14 +0800] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:14 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "-" 20.151.130.38 - - [02/May/2026:22:50:15 +0800] "GET /admin/admin.php HTTP/1.1" 403 261 "-" "-" 198.235.24.151 - - [03/May/2026:01:08:07 +0800] "GET / HTTP/1.1" 403 261 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.173.121.85 - - [03/May/2026:03:08:22 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:22 +0800] "GET /error.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:23 +0800] "GET /wp-load.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:23 +0800] "GET /77.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:23 +0800] "GET /.sghb.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:23 +0800] "GET /zoko.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:23 +0800] "GET /solo1.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:24 +0800] "GET /locales.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:24 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:24 +0800] "GET /pucci.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:24 +0800] "GET /wp-includes/blocks/details/ HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:24 +0800] "GET /.dj/index.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:25 +0800] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:25 +0800] "GET /.tmb/ HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:25 +0800] "GET /.admin.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:25 +0800] "GET /sw.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:25 +0800] "GET /vuln.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:26 +0800] "GET /wp-temp.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:26 +0800] "GET /sxdfrt.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:26 +0800] "GET /wp-content/themes/twentytwentyfive/assets/ HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:26 +0800] "GET /wp-includes/blocks/buttons/ HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:26 +0800] "GET /class-bda.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:26 +0800] "GET /bhm.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:27 +0800] "GET /xmu.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:27 +0800] "GET /ref.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:27 +0800] "GET /wp-xme.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:27 +0800] "GET /adminer.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:27 +0800] "GET /ktfow.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:28 +0800] "GET /mode.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:28 +0800] "GET /Xx.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:28 +0800] "GET /xmini.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:28 +0800] "GET /2468.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:28 +0800] "GET //wp-admin/js/index.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:29 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:29 +0800] "GET /amdin.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:29 +0800] "GET /huya.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:29 +0800] "GET /puc.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:29 +0800] "GET //themes.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:30 +0800] "GET /ewp.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:30 +0800] "GET /kikikoko.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:30 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:30 +0800] "GET /xff.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:30 +0800] "GET /lupo.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:30 +0800] "GET /awa.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:31 +0800] "GET /popo.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:31 +0800] "GET /13.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:31 +0800] "GET /11.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:31 +0800] "GET /p.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:31 +0800] "GET //wp-includes/Requests/ HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:32 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:32 +0800] "GET //shell.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:32 +0800] "GET /tea.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:32 +0800] "GET /seo.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:32 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:33 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:33 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:33 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:33 +0800] "GET /3.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:33 +0800] "GET /4.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:33 +0800] "GET /5.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:34 +0800] "GET /6.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:34 +0800] "GET /9.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:34 +0800] "GET /10.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:34 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:34 +0800] "GET /.well-known/nastar.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:35 +0800] "GET /f35_S.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:35 +0800] "GET /2026w.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:35 +0800] "GET /111.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:35 +0800] "GET /wp1.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:35 +0800] "GET /aligk.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:36 +0800] "GET /byrgo.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:36 +0800] "GET //xwpg.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:36 +0800] "GET /ass.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:36 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:36 +0800] "GET /no18.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:37 +0800] "GET /fine.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:37 +0800] "GET /hplfuns.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:37 +0800] "GET /xa.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:37 +0800] "GET //admin.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:37 +0800] "GET /inege.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:38 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:38 +0800] "GET /uuu.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:38 +0800] "GET /no1.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:38 +0800] "GET /w2025.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:38 +0800] "GET /fvvff.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:38 +0800] "GET /a2.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:39 +0800] "GET //edit.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:39 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:39 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:39 +0800] "GET /66.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:39 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:40 +0800] "GET /ol.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:40 +0800] "GET //f6.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:40 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:40 +0800] "GET /style.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:40 +0800] "GET //av.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:41 +0800] "GET /wp-admin/css/bolt.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:41 +0800] "GET /wp-act.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:41 +0800] "GET /aaa.php?p= HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:41 +0800] "GET /classwithtostring.php?p= HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:41 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:42 +0800] "GET /sbhu.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:42 +0800] "GET /wp-blog.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:42 +0800] "GET //wp-includes/js/jquery/ HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:42 +0800] "GET //wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:43 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:43 +0800] "GET //adminfuns.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:43 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:43 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:43 +0800] "GET //cgi-bin/index.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:44 +0800] "GET /fff.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:44 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:44 +0800] "GET /we.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:44 +0800] "GET /makeasmtp.php?p= HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:44 +0800] "GET //admin1.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:45 +0800] "GET //wp-includes/css/dist/ HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:45 +0800] "GET /BDKR28WP.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:45 +0800] "GET //wp-includes/l10n/ HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:45 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:45 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:46 +0800] "GET /wp-admin/js/fi.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:46 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:46 +0800] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:46 +0800] "GET /av.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:46 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:46 +0800] "GET /fi.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:47 +0800] "GET //a1.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:47 +0800] "GET /update/f35.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:47 +0800] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 199 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:48 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:48 +0800] "GET //wp-includes/css/index.php?p= HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:48 +0800] "GET /wp-includes/SimplePie/ HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:48 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:49 +0800] "GET /dev.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:49 +0800] "GET /bal.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:49 +0800] "GET /in.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:49 +0800] "GET /gssdd.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:49 +0800] "GET //cgi-bin/admin.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:50 +0800] "GET /bs1.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:50 +0800] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:50 +0800] "GET /axx.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:50 +0800] "GET /alfashell.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:50 +0800] "GET /gettest.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:51 +0800] "GET /acp.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:51 +0800] "GET /file48.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:51 +0800] "GET /g.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:51 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:51 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:51 +0800] "GET /ew.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:52 +0800] "GET /file21.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:52 +0800] "GET /hypo.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:52 +0800] "GET /file18.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:52 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:52 +0800] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 261 "-" "-" 172.173.121.85 - - [03/May/2026:03:08:53 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "-" 5.189.187.165 - - [03/May/2026:05:20:37 +0800] "GET /_profiler/phpinfo HTTP/1.1" 403 261 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 5.189.187.165 - - [03/May/2026:05:20:38 +0800] "GET /phpinfo.php HTTP/1.1" 403 261 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 5.189.187.165 - - [03/May/2026:05:20:39 +0800] "GET /phpinfo HTTP/1.1" 403 261 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 5.189.187.165 - - [03/May/2026:05:20:40 +0800] "GET /aws.yml HTTP/1.1" 403 261 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 5.189.187.165 - - [03/May/2026:05:20:40 +0800] "GET /.env.bak HTTP/1.1" 403 199 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 5.189.187.165 - - [03/May/2026:05:20:41 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 5.189.187.165 - - [03/May/2026:05:20:42 +0800] "GET /.aws/credentials HTTP/1.1" 403 261 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 5.189.187.165 - - [03/May/2026:05:20:42 +0800] "GET /config/aws.yml HTTP/1.1" 403 261 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 5.189.187.165 - - [03/May/2026:05:20:43 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 5.189.187.165 - - [03/May/2026:05:20:44 +0800] "GET /config.js HTTP/1.1" 403 261 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 103.215.74.60 - - [03/May/2026:14:25:07 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Mobile/15E148 Safari/604.1" 103.215.74.60 - - [03/May/2026:14:25:08 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 103.215.74.60 - - [03/May/2026:14:25:10 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Mobile/15E148 Safari/604.1" 103.215.74.60 - - [03/May/2026:14:25:12 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 88.151.32.168 - - [03/May/2026:16:35:00 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:150.0) Gecko/20100101 Firefox/150.0" 88.151.32.168 - - [03/May/2026:16:35:00 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" 88.151.32.168 - - [03/May/2026:16:35:01 +0800] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Mobile/15E148 Safari/604.1" 88.151.32.168 - - [03/May/2026:16:35:02 +0800] "GET /app/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 88.151.32.168 - - [03/May/2026:16:35:02 +0800] "GET /api/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 88.151.32.168 - - [03/May/2026:16:35:02 +0800] "GET /credentials.json HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 88.151.32.168 - - [03/May/2026:16:35:02 +0800] "GET /backend/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 88.151.32.168 - - [03/May/2026:16:35:02 +0800] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 88.151.32.168 - - [03/May/2026:16:35:02 +0800] "GET /.aws/credentials HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 88.151.32.168 - - [03/May/2026:16:35:02 +0800] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" 88.151.32.168 - - [03/May/2026:16:35:02 +0800] "GET /serviceAccountKey.json HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 88.151.32.168 - - [03/May/2026:16:35:02 +0800] "GET /secrets.json HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 88.151.32.168 - - [03/May/2026:16:35:03 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 88.151.32.168 - - [03/May/2026:16:35:03 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 129.150.44.188 - - [03/May/2026:20:19:35 +0800] "GET /file-manager/initialize HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 129.150.44.188 - - [03/May/2026:20:19:35 +0800] "GET /file-manager/initialize HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 74.7.175.183 - - [03/May/2026:20:34:10 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.227.21 - - [03/May/2026:21:57:34 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.241.131 - - [03/May/2026:21:57:35 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 65.111.15.113 - - [04/May/2026:03:55:07 +0800] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-us) AppleWebKit/534.35 (KHTML, like Gecko) Chrome/11.0.696.65 Safari/534.35 Puffin/2.9174AT" 140.245.46.52 - - [04/May/2026:04:55:33 +0800] "GET /file-manager/initialize HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 140.245.46.52 - - [04/May/2026:04:55:33 +0800] "GET /file-manager/initialize HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 20.48.152.116 - - [04/May/2026:07:53:44 +0800] "GET /class-t.api.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.48.152.116 - - [04/May/2026:07:53:44 +0800] "GET /class-t.api.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.48.152.116 - - [04/May/2026:07:53:45 +0800] "GET /class-t.api.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.48.152.116 - - [04/May/2026:07:53:46 +0800] "GET /class-t.api.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.90.138 - - [04/May/2026:09:49:00 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.90.138 - - [04/May/2026:09:49:00 +0800] "GET /zwso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.90.138 - - [04/May/2026:09:49:00 +0800] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.90.138 - - [04/May/2026:09:49:00 +0800] "GET /class19.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.90.138 - - [04/May/2026:09:49:01 +0800] "GET /class20.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.90.138 - - [04/May/2026:09:49:01 +0800] "GET /class20.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.90.138 - - [04/May/2026:09:49:02 +0800] "GET /class20.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.90.138 - - [04/May/2026:09:49:03 +0800] "GET /class20.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.201 - - [04/May/2026:11:33:57 +0800] "GET /xleet.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.201 - - [04/May/2026:11:33:57 +0800] "GET /xmrlpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.201 - - [04/May/2026:11:33:57 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.201 - - [04/May/2026:11:33:58 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.201 - - [04/May/2026:11:33:58 +0800] "GET /a.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.201 - - [04/May/2026:11:33:58 +0800] "GET /aa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.201 - - [04/May/2026:11:33:58 +0800] "GET /aaa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.201 - - [04/May/2026:11:33:58 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.201 - - [04/May/2026:11:33:58 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.201 - - [04/May/2026:11:33:58 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.201 - - [04/May/2026:11:33:59 +0800] "GET /admin/controller/extension/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.201 - - [04/May/2026:11:33:59 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.201 - - [04/May/2026:11:33:59 +0800] "GET /alfa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.201 - - [04/May/2026:11:33:59 +0800] "GET /anonse/lock360.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.201 - - [04/May/2026:11:33:59 +0800] "GET /archive.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.201 - - [04/May/2026:11:33:59 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.201 - - [04/May/2026:11:33:59 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.201 - - [04/May/2026:11:34:00 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.201 - - [04/May/2026:11:34:00 +0800] "GET /config.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.201 - - [04/May/2026:11:34:00 +0800] "GET /cookie.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.201 - - [04/May/2026:11:34:00 +0800] "GET /core.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.201 - - [04/May/2026:11:34:00 +0800] "GET /css/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.201 - - [04/May/2026:11:34:00 +0800] "GET /default.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.201 - - [04/May/2026:11:34:00 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.201 - - [04/May/2026:11:34:01 +0800] "GET /dropdown.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.201 - - [04/May/2026:11:34:01 +0800] "GET /edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.201 - - [04/May/2026:11:34:01 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 145.220.91.19 - - [04/May/2026:12:13:21 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 35.208.177.175 - - [04/May/2026:14:04:43 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.1.26.107 - - [04/May/2026:14:26:05 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 142.93.101.90 - - [04/May/2026:15:10:54 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 142.93.101.90 - - [04/May/2026:15:10:54 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "http://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 142.93.101.90 - - [04/May/2026:15:10:55 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 142.93.101.90 - - [04/May/2026:15:11:01 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "https://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 74.7.241.39 - - [04/May/2026:21:01:32 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.175.183 - - [04/May/2026:21:01:33 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.241.131 - - [04/May/2026:23:34:35 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 209.87.169.42 - - [04/May/2026:23:51:46 +0800] "GET /wp-includes/css/buttons.css HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 138.91.34.88 - - [05/May/2026:00:12:26 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:26 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:26 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:26 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:26 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:26 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:26 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:26 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:27 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:27 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:27 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:27 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:27 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:27 +0800] "GET /wp-admin/user.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:27 +0800] "GET /wp-conf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:27 +0800] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:27 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:28 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:28 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:28 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:28 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:28 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:28 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:28 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:28 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:28 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:29 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:29 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:29 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:29 +0800] "GET /kbfr.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:29 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:29 +0800] "GET /chosen.php?p= HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:29 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:29 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:29 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:29 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:29 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:31 +0800] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:31 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:33 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:33 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:33 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:33 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:33 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:33 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:33 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:34 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.34.88 - - [05/May/2026:00:12:34 +0800] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.198.240.250 - - [05/May/2026:01:29:59 +0800] "GET /wp-includes/css/buttons.css HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 54.77.50.113 - - [05/May/2026:06:06:09 +0800] "GET / HTTP/1.0" 403 261 "-" "Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; +info@netcraft.com)" 47.128.112.105 - - [05/May/2026:06:20:59 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)" 192.161.58.250 - - [05/May/2026:06:25:25 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.8349.1338 Mobile Safari/537.36" 110.148.160.67 - - [05/May/2026:06:29:02 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 13; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36" 103.76.239.179 - - [05/May/2026:06:29:09 +0800] "GET / HTTP/1.1" 403 261 "https://thegreenscapecollective.com.au/" "Mozilla/5.0 (Linux; Android 8.0.0; SM-J330G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 EdgA/114.0.1823.74" 103.76.238.188 - - [05/May/2026:06:29:11 +0800] "GET / HTTP/1.1" 403 261 "https://www.bing.com.au/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Mobile Safari/537.36 EdgA/126.0.0.0" 104.233.37.11 - - [05/May/2026:06:29:13 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Android 13; Mobile; rv:128.0) Gecko/128.0 Firefox/128.0" 103.76.239.93 - - [05/May/2026:06:29:15 +0800] "GET / HTTP/1.1" 403 261 "http://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36" 27.33.60.146 - - [05/May/2026:06:29:16 +0800] "GET / HTTP/1.1" 403 261 "http://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36" 103.76.238.84 - - [05/May/2026:06:29:17 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 8.0.0; SM-J330G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 EdgA/114.0.1823.74" 194.107.122.6 - - [05/May/2026:06:29:24 +0800] "GET / HTTP/1.1" 403 261 "https://thegreenscapecollective.com.au/" "Mozilla/5.0 (Linux; Android 11; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36" 104.164.182.179 - - [05/May/2026:06:29:26 +0800] "GET / HTTP/1.1" 403 261 "https://www.yahoo.com.au/" "Mozilla/5.0 (Linux; Android 8.0.0; SM-J330G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 EdgA/114.0.1823.74" 103.76.237.79 - - [05/May/2026:06:29:31 +0800] "GET / HTTP/1.1" 403 261 "https://thegreenscapecollective.com.au/" "Mozilla/5.0 (Linux; Android 13; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36" 163.47.70.15 - - [05/May/2026:06:29:35 +0800] "GET / HTTP/1.1" 403 261 "http://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36" 115.186.230.18 - - [05/May/2026:06:29:36 +0800] "GET / HTTP/1.1" 403 261 "https://www.yahoo.com.au/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36" 45.86.200.112 - - [05/May/2026:07:51:25 +0800] "GET /bless.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.112 - - [05/May/2026:07:51:25 +0800] "GET /O-Simple.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.112 - - [05/May/2026:07:51:25 +0800] "GET /lock360.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.112 - - [05/May/2026:07:51:26 +0800] "GET /zwso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.112 - - [05/May/2026:07:51:26 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.112 - - [05/May/2026:07:51:26 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.112 - - [05/May/2026:07:51:26 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.112 - - [05/May/2026:07:51:27 +0800] "GET /mah.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.112 - - [05/May/2026:07:51:27 +0800] "GET /.wp/wso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.112 - - [05/May/2026:07:51:27 +0800] "GET /core.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.112 - - [05/May/2026:07:51:28 +0800] "GET /robots.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.112 - - [05/May/2026:07:51:28 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.112 - - [05/May/2026:07:51:28 +0800] "GET /mini.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.112 - - [05/May/2026:07:51:28 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.112 - - [05/May/2026:07:51:29 +0800] "GET /file5.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.112 - - [05/May/2026:07:51:29 +0800] "GET /ahax.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.112 - - [05/May/2026:07:51:29 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.112 - - [05/May/2026:07:51:30 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.112 - - [05/May/2026:07:51:30 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.112 - - [05/May/2026:07:51:30 +0800] "GET /update/f35.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.112 - - [05/May/2026:07:51:30 +0800] "GET /wp-content/hello.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.112 - - [05/May/2026:07:51:31 +0800] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.112 - - [05/May/2026:07:51:31 +0800] "GET /themes/zMousse/otuz1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.112 - - [05/May/2026:07:51:31 +0800] "GET /wp-content/edit-wolf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.112 - - [05/May/2026:07:51:31 +0800] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.112 - - [05/May/2026:07:51:32 +0800] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.112 - - [05/May/2026:07:51:32 +0800] "GET /images/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.112 - - [05/May/2026:07:51:32 +0800] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.112 - - [05/May/2026:07:51:33 +0800] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.112 - - [05/May/2026:07:51:33 +0800] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.112 - - [05/May/2026:07:51:33 +0800] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.112 - - [05/May/2026:07:51:33 +0800] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.112 - - [05/May/2026:07:51:34 +0800] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.54 - - [05/May/2026:07:51:34 +0800] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.54 - - [05/May/2026:07:51:34 +0800] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.54 - - [05/May/2026:07:51:35 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.54 - - [05/May/2026:07:51:35 +0800] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.107 - - [05/May/2026:07:51:36 +0800] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.107 - - [05/May/2026:07:51:36 +0800] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.107 - - [05/May/2026:07:51:36 +0800] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.107 - - [05/May/2026:07:51:36 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.107 - - [05/May/2026:07:51:37 +0800] "GET /uploads/94056-upload.phtml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.107 - - [05/May/2026:07:51:37 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.107 - - [05/May/2026:07:51:37 +0800] "GET /tinyfilemanager.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.97 - - [05/May/2026:07:51:38 +0800] "GET /js/bas.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.97 - - [05/May/2026:07:51:38 +0800] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.97 - - [05/May/2026:07:51:38 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.97 - - [05/May/2026:07:51:39 +0800] "GET /wp-includes/js/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.107 - - [05/May/2026:07:51:39 +0800] "GET /wp-content/upgrade/item.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.107 - - [05/May/2026:07:51:39 +0800] "GET /buy.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.107 - - [05/May/2026:07:51:40 +0800] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.107 - - [05/May/2026:07:51:40 +0800] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.107 - - [05/May/2026:07:51:40 +0800] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.107 - - [05/May/2026:07:51:41 +0800] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.107 - - [05/May/2026:07:51:41 +0800] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.85 - - [05/May/2026:07:51:41 +0800] "GET /admin/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.85 - - [05/May/2026:07:51:42 +0800] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.92 - - [05/May/2026:07:51:42 +0800] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.83 - - [05/May/2026:07:51:43 +0800] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.76 - - [05/May/2026:07:51:43 +0800] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.111 - - [05/May/2026:07:51:45 +0800] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.89 - - [05/May/2026:07:51:48 +0800] "GET /files/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.89 - - [05/May/2026:07:51:48 +0800] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.81 - - [05/May/2026:07:51:49 +0800] "GET /inc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.81 - - [05/May/2026:07:51:49 +0800] "GET /wp-content/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.81 - - [05/May/2026:07:51:50 +0800] "GET /filemanager.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.87 - - [05/May/2026:07:51:51 +0800] "GET /cgi-bin/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.87 - - [05/May/2026:07:51:51 +0800] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.87 - - [05/May/2026:07:51:52 +0800] "GET /wp-includes/IXR/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.83 - - [05/May/2026:07:51:52 +0800] "GET /wp-admin/js/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.83 - - [05/May/2026:07:51:52 +0800] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.112 - - [05/May/2026:07:51:53 +0800] "GET /function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.112 - - [05/May/2026:07:51:53 +0800] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.53 - - [05/May/2026:07:51:55 +0800] "GET /wp-signup.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.53 - - [05/May/2026:07:51:55 +0800] "GET /wp-admin/network/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.53 - - [05/May/2026:07:51:55 +0800] "GET /admin/upload/css.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.53 - - [05/May/2026:07:51:56 +0800] "GET /wp-blog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.53 - - [05/May/2026:07:51:56 +0800] "GET /wp-admin/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.53 - - [05/May/2026:07:51:56 +0800] "GET /wp-content/plugins/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.53 - - [05/May/2026:07:51:57 +0800] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.108 - - [05/May/2026:07:51:57 +0800] "GET /wp-l0gin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.108 - - [05/May/2026:07:51:57 +0800] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.79 - - [05/May/2026:07:51:57 +0800] "GET /bless.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.79 - - [05/May/2026:07:51:58 +0800] "GET /O-Simple.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.79 - - [05/May/2026:07:51:58 +0800] "GET /lock360.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.55 - - [05/May/2026:07:51:59 +0800] "GET /new.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.55 - - [05/May/2026:07:51:59 +0800] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.55 - - [05/May/2026:07:52:00 +0800] "GET /wp-includes/defaults.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.84 - - [05/May/2026:07:52:00 +0800] "GET /images/DJP9.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.84 - - [05/May/2026:07:52:00 +0800] "GET /wp-includes/customize/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.79 - - [05/May/2026:07:51:58 +0800] "GET /zwso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.79 - - [05/May/2026:07:52:01 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:52:01 +0800] "GET /wp-admin/shell20211028.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.79 - - [05/May/2026:07:52:01 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:52:01 +0800] "GET /natural.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.79 - - [05/May/2026:07:52:01 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.79 - - [05/May/2026:07:52:02 +0800] "GET /mah.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.79 - - [05/May/2026:07:52:02 +0800] "GET /.wp/wso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.79 - - [05/May/2026:07:52:02 +0800] "GET /core.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.79 - - [05/May/2026:07:52:03 +0800] "GET /robots.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.79 - - [05/May/2026:07:52:03 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.79 - - [05/May/2026:07:52:03 +0800] "GET /mini.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.79 - - [05/May/2026:07:52:03 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.79 - - [05/May/2026:07:52:04 +0800] "GET /file5.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.79 - - [05/May/2026:07:52:04 +0800] "GET /ahax.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.102 - - [05/May/2026:07:52:01 +0800] "GET /item.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.102 - - [05/May/2026:07:52:04 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.79 - - [05/May/2026:07:52:04 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:52:04 +0800] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.79 - - [05/May/2026:07:52:04 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.79 - - [05/May/2026:07:52:05 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.57 - - [05/May/2026:07:52:05 +0800] "GET /wp-admin/images/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.79 - - [05/May/2026:07:52:05 +0800] "GET /update/f35.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.57 - - [05/May/2026:07:52:05 +0800] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.79 - - [05/May/2026:07:52:05 +0800] "GET /wp-content/hello.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.79 - - [05/May/2026:07:52:06 +0800] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.79 - - [05/May/2026:07:52:06 +0800] "GET /themes/zMousse/otuz1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.79 - - [05/May/2026:07:52:06 +0800] "GET /wp-content/edit-wolf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.79 - - [05/May/2026:07:52:06 +0800] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.79 - - [05/May/2026:07:52:07 +0800] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.79 - - [05/May/2026:07:52:07 +0800] "GET /images/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.79 - - [05/May/2026:07:52:07 +0800] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.79 - - [05/May/2026:07:52:07 +0800] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.79 - - [05/May/2026:07:52:08 +0800] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.79 - - [05/May/2026:07:52:08 +0800] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.79 - - [05/May/2026:07:52:08 +0800] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.79 - - [05/May/2026:07:52:09 +0800] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.102 - - [05/May/2026:07:52:06 +0800] "GET /about/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:52:09 +0800] "GET /wp-includes/Requests/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.100 - - [05/May/2026:07:52:09 +0800] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.108 - - [05/May/2026:07:52:09 +0800] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.108 - - [05/May/2026:07:52:09 +0800] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.103 - - [05/May/2026:07:52:10 +0800] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.108 - - [05/May/2026:07:52:10 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.108 - - [05/May/2026:07:52:10 +0800] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.112 - - [05/May/2026:07:52:10 +0800] "GET /wp-content/languages/404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.112 - - [05/May/2026:07:52:10 +0800] "GET /update/403.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.109 - - [05/May/2026:07:52:10 +0800] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.112 - - [05/May/2026:07:52:11 +0800] "GET /default.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.109 - - [05/May/2026:07:52:11 +0800] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.112 - - [05/May/2026:07:52:11 +0800] "GET /wp-includes/assets/info.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.109 - - [05/May/2026:07:52:11 +0800] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.109 - - [05/May/2026:07:52:11 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.109 - - [05/May/2026:07:52:12 +0800] "GET /uploads/94056-upload.phtml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.109 - - [05/May/2026:07:52:12 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.109 - - [05/May/2026:07:52:12 +0800] "GET /tinyfilemanager.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.109 - - [05/May/2026:07:52:13 +0800] "GET /wp-includes/class.api.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.79 - - [05/May/2026:07:52:13 +0800] "GET /js/bas.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.79 - - [05/May/2026:07:52:13 +0800] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.104 - - [05/May/2026:07:52:13 +0800] "GET /wp-includes/fonts/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.79 - - [05/May/2026:07:52:13 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.79 - - [05/May/2026:07:52:13 +0800] "GET /wp-includes/js/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.101 - - [05/May/2026:07:52:14 +0800] "GET /wp-admin/chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.101 - - [05/May/2026:07:52:14 +0800] "GET /autoload_classmap/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.101 - - [05/May/2026:07:52:14 +0800] "GET /dropdown.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.101 - - [05/May/2026:07:52:15 +0800] "GET /images/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.101 - - [05/May/2026:07:52:15 +0800] "GET /db.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.101 - - [05/May/2026:07:52:15 +0800] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.82 - - [05/May/2026:07:52:15 +0800] "GET /wp-content/upgrade/item.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.101 - - [05/May/2026:07:52:15 +0800] "GET /mah/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.82 - - [05/May/2026:07:52:15 +0800] "GET /buy.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.101 - - [05/May/2026:07:52:16 +0800] "GET /wp-content/plugins/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.82 - - [05/May/2026:07:52:16 +0800] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.101 - - [05/May/2026:07:52:16 +0800] "GET /wp-includes/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.82 - - [05/May/2026:07:52:16 +0800] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.82 - - [05/May/2026:07:52:16 +0800] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.82 - - [05/May/2026:07:52:16 +0800] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.82 - - [05/May/2026:07:52:17 +0800] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.88 - - [05/May/2026:07:52:17 +0800] "GET /admin/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.88 - - [05/May/2026:07:52:18 +0800] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.96 - - [05/May/2026:07:52:18 +0800] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.84 - - [05/May/2026:07:52:19 +0800] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.76 - - [05/May/2026:07:52:16 +0800] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.76 - - [05/May/2026:07:52:20 +0800] "GET /wp-admin/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.76 - - [05/May/2026:07:52:20 +0800] "GET /templates/beez3/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.76 - - [05/May/2026:07:52:20 +0800] "GET /wp-admin/js/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.86 - - [05/May/2026:07:52:20 +0800] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.76 - - [05/May/2026:07:52:21 +0800] "GET /install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.76 - - [05/May/2026:07:52:21 +0800] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.76 - - [05/May/2026:07:52:21 +0800] "GET /images/class-config.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.76 - - [05/May/2026:07:52:21 +0800] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.76 - - [05/May/2026:07:52:22 +0800] "GET /templates/beez/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.76 - - [05/May/2026:07:52:22 +0800] "GET /bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.51 - - [05/May/2026:07:52:22 +0800] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.76 - - [05/May/2026:07:52:22 +0800] "GET /class.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.76 - - [05/May/2026:07:52:22 +0800] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.82.72.4 - - [05/May/2026:07:52:22 +0800] "GET /files/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.76 - - [05/May/2026:07:52:23 +0800] "GET /wp-content/product.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.82.72.4 - - [05/May/2026:07:52:23 +0800] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.76 - - [05/May/2026:07:52:23 +0800] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.76 - - [05/May/2026:07:52:23 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.104 - - [05/May/2026:07:52:23 +0800] "GET /inc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.76 - - [05/May/2026:07:52:23 +0800] "GET /wp-includes/rest-api/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.104 - - [05/May/2026:07:52:24 +0800] "GET /wp-content/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.104 - - [05/May/2026:07:52:24 +0800] "GET /filemanager.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.82.72.4 - - [05/May/2026:07:52:24 +0800] "GET /css/css.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.82.72.4 - - [05/May/2026:07:52:24 +0800] "GET /init.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.92 - - [05/May/2026:07:52:24 +0800] "GET /cgi-bin/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.82.72.4 - - [05/May/2026:07:52:25 +0800] "GET /wp-admin/user/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.92 - - [05/May/2026:07:52:25 +0800] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.82.72.4 - - [05/May/2026:07:52:25 +0800] "GET /autoload_classmap/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.92 - - [05/May/2026:07:52:25 +0800] "GET /wp-includes/IXR/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.82.72.4 - - [05/May/2026:07:52:25 +0800] "GET /wp-includes/item.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.77 - - [05/May/2026:07:52:25 +0800] "GET /wp-admin/js/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.73 - - [05/May/2026:07:52:26 +0800] "GET /assets/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.77 - - [05/May/2026:07:52:26 +0800] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.73 - - [05/May/2026:07:52:26 +0800] "GET /.well-known/pki-validation/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.93 - - [05/May/2026:07:52:26 +0800] "GET /function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.73 - - [05/May/2026:07:52:26 +0800] "GET /wp-content/uploads/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.93 - - [05/May/2026:07:52:27 +0800] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.73 - - [05/May/2026:07:52:27 +0800] "GET /css/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.73 - - [05/May/2026:07:52:27 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.73 - - [05/May/2026:07:52:27 +0800] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.110 - - [05/May/2026:07:52:27 +0800] "GET /wp-signup.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.110 - - [05/May/2026:07:52:27 +0800] "GET /wp-admin/network/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.73 - - [05/May/2026:07:52:27 +0800] "GET /wp_wlx.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.73 - - [05/May/2026:07:52:28 +0800] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.110 - - [05/May/2026:07:52:28 +0800] "GET /admin/upload/css.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.73 - - [05/May/2026:07:52:28 +0800] "GET /wp-includes/assets/husky301.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.110 - - [05/May/2026:07:52:28 +0800] "GET /wp-blog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.110 - - [05/May/2026:07:52:28 +0800] "GET /wp-admin/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.59 - - [05/May/2026:07:52:29 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.110 - - [05/May/2026:07:52:29 +0800] "GET /wp-content/plugins/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.110 - - [05/May/2026:07:52:29 +0800] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.59 - - [05/May/2026:07:52:29 +0800] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.59 - - [05/May/2026:07:52:29 +0800] "GET /wp-content/themes/chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.59 - - [05/May/2026:07:52:29 +0800] "GET /wp-header.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.59 - - [05/May/2026:07:52:30 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.59 - - [05/May/2026:07:52:30 +0800] "GET /Marvins.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.59 - - [05/May/2026:07:52:30 +0800] "GET /wp-content/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.83 - - [05/May/2026:07:52:31 +0800] "GET /wp-l0gin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.59 - - [05/May/2026:07:52:31 +0800] "GET /wp-class.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.83 - - [05/May/2026:07:52:31 +0800] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.59 - - [05/May/2026:07:52:31 +0800] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.78 - - [05/May/2026:07:52:31 +0800] "GET /new.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.105 - - [05/May/2026:07:52:31 +0800] "GET /xx.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.78 - - [05/May/2026:07:52:32 +0800] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.105 - - [05/May/2026:07:52:32 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.78 - - [05/May/2026:07:52:32 +0800] "GET /wp-includes/defaults.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.105 - - [05/May/2026:07:52:32 +0800] "GET /wp-includes/classwithtostring.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.92 - - [05/May/2026:07:52:32 +0800] "GET /images/DJP9.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.75 - - [05/May/2026:07:52:32 +0800] "GET /wp-content/blue.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.92 - - [05/May/2026:07:52:33 +0800] "GET /wp-includes/customize/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.75 - - [05/May/2026:07:52:33 +0800] "GET /content.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.75 - - [05/May/2026:07:52:33 +0800] "GET /wp-content/uploads/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.77 - - [05/May/2026:07:52:33 +0800] "GET /wp-admin/shell20211028.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.75 - - [05/May/2026:07:52:33 +0800] "GET /wp-admin/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.77 - - [05/May/2026:07:52:34 +0800] "GET /natural.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.75 - - [05/May/2026:07:52:34 +0800] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.77 - - [05/May/2026:07:52:34 +0800] "GET /item.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.77 - - [05/May/2026:07:52:34 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.99 - - [05/May/2026:07:52:34 +0800] "GET /wp-content/languages/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.77 - - [05/May/2026:07:52:34 +0800] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.99 - - [05/May/2026:07:52:34 +0800] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.99 - - [05/May/2026:07:52:35 +0800] "GET /wp-content/plugins/up/main.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.99 - - [05/May/2026:07:52:35 +0800] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.99 - - [05/May/2026:07:52:35 +0800] "GET /wp-admin/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.99 - - [05/May/2026:07:52:35 +0800] "GET /wp-admin/includes/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.99 - - [05/May/2026:07:52:36 +0800] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.99 - - [05/May/2026:07:52:36 +0800] "GET /images/images/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.99 - - [05/May/2026:07:52:36 +0800] "GET /images/class.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.99 - - [05/May/2026:07:52:37 +0800] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.99 - - [05/May/2026:07:52:37 +0800] "GET /web.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.99 - - [05/May/2026:07:52:37 +0800] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.99 - - [05/May/2026:07:52:37 +0800] "GET /images/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.99 - - [05/May/2026:07:52:38 +0800] "GET /wp-content/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.99 - - [05/May/2026:07:52:38 +0800] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.99 - - [05/May/2026:07:52:38 +0800] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.99 - - [05/May/2026:07:52:38 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.99 - - [05/May/2026:07:52:39 +0800] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.55 - - [05/May/2026:07:52:40 +0800] "GET /radio.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.55 - - [05/May/2026:07:52:41 +0800] "GET /wp-admin/mah.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.55 - - [05/May/2026:07:52:41 +0800] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.55 - - [05/May/2026:07:52:41 +0800] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.55 - - [05/May/2026:07:52:41 +0800] "GET /wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.55 - - [05/May/2026:07:52:42 +0800] "GET /wp-setup.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.55 - - [05/May/2026:07:52:42 +0800] "GET /ms-themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.73 - - [05/May/2026:07:52:36 +0800] "GET /wp-admin/images/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.73 - - [05/May/2026:07:52:42 +0800] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.55 - - [05/May/2026:07:52:42 +0800] "GET /wp-includes/assets/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.86 - - [05/May/2026:07:52:44 +0800] "GET /about/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.112 - - [05/May/2026:07:52:44 +0800] "GET /style.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.86 - - [05/May/2026:07:52:44 +0800] "GET /wp-includes/Requests/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.112 - - [05/May/2026:07:52:44 +0800] "GET /wp-includes/infi.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.99 - - [05/May/2026:07:52:45 +0800] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.105 - - [05/May/2026:07:52:45 +0800] "GET /wp-admin/maint/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.105 - - [05/May/2026:07:52:45 +0800] "GET /x.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.73 - - [05/May/2026:07:52:45 +0800] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.105 - - [05/May/2026:07:52:45 +0800] "GET /wp-includes/IXR/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.82.72.3 - - [05/May/2026:07:52:46 +0800] "GET /wp-content/languages/404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.85 - - [05/May/2026:07:52:46 +0800] "GET /css/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.82.72.3 - - [05/May/2026:07:52:46 +0800] "GET /update/403.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.85 - - [05/May/2026:07:52:46 +0800] "GET /images/index22.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.82.72.3 - - [05/May/2026:07:52:46 +0800] "GET /default.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.85 - - [05/May/2026:07:52:46 +0800] "GET /wp-user.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.82.72.3 - - [05/May/2026:07:52:47 +0800] "GET /wp-includes/assets/info.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.85 - - [05/May/2026:07:52:47 +0800] "GET /wp-includes/pomo/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.59 - - [05/May/2026:07:52:47 +0800] "GET /wp-includes/class.api.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.84 - - [05/May/2026:07:52:47 +0800] "GET /wp-includes/pomo/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.51 - - [05/May/2026:07:52:48 +0800] "GET /wp-includes/fonts/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.77 - - [05/May/2026:07:52:48 +0800] "GET /config.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.77 - - [05/May/2026:07:52:48 +0800] "GET /special.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.77 - - [05/May/2026:07:52:48 +0800] "GET /assets/script.js.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.77 - - [05/May/2026:07:52:49 +0800] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.77 - - [05/May/2026:07:52:49 +0800] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.77 - - [05/May/2026:07:52:49 +0800] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.104 - - [05/May/2026:07:52:49 +0800] "GET /wp-admin/chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.104 - - [05/May/2026:07:52:50 +0800] "GET /autoload_classmap/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.104 - - [05/May/2026:07:52:50 +0800] "GET /dropdown.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.104 - - [05/May/2026:07:52:50 +0800] "GET /images/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.104 - - [05/May/2026:07:52:50 +0800] "GET /db.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.104 - - [05/May/2026:07:52:51 +0800] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.79 - - [05/May/2026:07:52:51 +0800] "GET /wp-content/uploads/wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.104 - - [05/May/2026:07:52:51 +0800] "GET /mah/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.79 - - [05/May/2026:07:52:51 +0800] "GET /wp-includes/certificates/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.104 - - [05/May/2026:07:52:51 +0800] "GET /wp-content/plugins/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.104 - - [05/May/2026:07:52:51 +0800] "GET /wp-includes/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:52:52 +0800] "GET /cgi-bin/class.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:52:52 +0800] "GET /wp-content/cache/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.84 - - [05/May/2026:07:52:52 +0800] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.102 - - [05/May/2026:07:52:52 +0800] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.84 - - [05/May/2026:07:52:52 +0800] "GET /wp-admin/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.102 - - [05/May/2026:07:52:52 +0800] "GET /wp-includes/edit.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.84 - - [05/May/2026:07:52:53 +0800] "GET /templates/beez3/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.84 - - [05/May/2026:07:52:53 +0800] "GET /wp-admin/js/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.87 - - [05/May/2026:07:52:53 +0800] "GET /webdb.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.84 - - [05/May/2026:07:52:53 +0800] "GET /install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.87 - - [05/May/2026:07:52:53 +0800] "GET /assets/images/doc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.84 - - [05/May/2026:07:52:53 +0800] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.87 - - [05/May/2026:07:52:53 +0800] "GET /file2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.84 - - [05/May/2026:07:52:54 +0800] "GET /images/class-config.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.87 - - [05/May/2026:07:52:54 +0800] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.84 - - [05/May/2026:07:52:54 +0800] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.84 - - [05/May/2026:07:52:54 +0800] "GET /templates/beez/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.84 - - [05/May/2026:07:52:55 +0800] "GET /bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.84 - - [05/May/2026:07:52:55 +0800] "GET /class.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.84 - - [05/May/2026:07:52:55 +0800] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.84 - - [05/May/2026:07:52:55 +0800] "GET /wp-content/product.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.109 - - [05/May/2026:07:52:55 +0800] "GET /alfa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.84 - - [05/May/2026:07:52:56 +0800] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.109 - - [05/May/2026:07:52:56 +0800] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.84 - - [05/May/2026:07:52:56 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.109 - - [05/May/2026:07:52:56 +0800] "GET /wp-includes/click.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.84 - - [05/May/2026:07:52:56 +0800] "GET /wp-includes/rest-api/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.82.72.3 - - [05/May/2026:07:52:56 +0800] "GET /.well-known/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.107 - - [05/May/2026:07:52:57 +0800] "GET /css/css.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.82.72.3 - - [05/May/2026:07:52:57 +0800] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.107 - - [05/May/2026:07:52:57 +0800] "GET /init.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.82.72.3 - - [05/May/2026:07:52:57 +0800] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.107 - - [05/May/2026:07:52:57 +0800] "GET /wp-admin/user/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.82.72.3 - - [05/May/2026:07:52:57 +0800] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.89 - - [05/May/2026:07:52:58 +0800] "GET /wp-admin/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.89 - - [05/May/2026:07:52:58 +0800] "GET /edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.89 - - [05/May/2026:07:52:58 +0800] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.89 - - [05/May/2026:07:52:59 +0800] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.89 - - [05/May/2026:07:52:59 +0800] "GET /wp-links-opml.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.89 - - [05/May/2026:07:52:59 +0800] "GET /wp-admin/user/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.89 - - [05/May/2026:07:53:00 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.89 - - [05/May/2026:07:53:00 +0800] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.107 - - [05/May/2026:07:52:58 +0800] "GET /autoload_classmap/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.107 - - [05/May/2026:07:53:00 +0800] "GET /wp-includes/item.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.90 - - [05/May/2026:07:53:00 +0800] "GET /wp-includes/xl2023.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.82.72.3 - - [05/May/2026:07:53:01 +0800] "GET /assets/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.51 - - [05/May/2026:07:53:01 +0800] "GET /wp-includes/certificates/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.82.72.3 - - [05/May/2026:07:53:01 +0800] "GET /.well-known/pki-validation/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.82.72.3 - - [05/May/2026:07:53:01 +0800] "GET /wp-content/uploads/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.105 - - [05/May/2026:07:53:02 +0800] "GET /wp-includes/images/media/dog.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.82.72.3 - - [05/May/2026:07:53:02 +0800] "GET /css/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.82.72.3 - - [05/May/2026:07:53:02 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.80 - - [05/May/2026:07:53:02 +0800] "GET /xp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.82.72.3 - - [05/May/2026:07:53:02 +0800] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.80 - - [05/May/2026:07:53:02 +0800] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.82.72.3 - - [05/May/2026:07:53:02 +0800] "GET /wp_wlx.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.82.72.3 - - [05/May/2026:07:53:03 +0800] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.99 - - [05/May/2026:07:53:03 +0800] "GET /wp-includes/assets/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.82.72.3 - - [05/May/2026:07:53:03 +0800] "GET /wp-includes/assets/husky301.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.98 - - [05/May/2026:07:53:03 +0800] "GET /wp-links.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.98 - - [05/May/2026:07:53:04 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.98 - - [05/May/2026:07:53:04 +0800] "GET /wp-includes/css/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.88 - - [05/May/2026:07:53:05 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.82.72.4 - - [05/May/2026:07:53:05 +0800] "GET /wp-includes/ID3/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.88 - - [05/May/2026:07:53:05 +0800] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.88 - - [05/May/2026:07:53:05 +0800] "GET /wp-content/themes/chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.56 - - [05/May/2026:07:53:05 +0800] "GET /wp-includes/pomo/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.88 - - [05/May/2026:07:53:05 +0800] "GET /wp-header.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.91 - - [05/May/2026:07:53:06 +0800] "GET /wp-includes/IXR/security.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.88 - - [05/May/2026:07:53:06 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.88 - - [05/May/2026:07:53:06 +0800] "GET /Marvins.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.103 - - [05/May/2026:07:53:06 +0800] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.88 - - [05/May/2026:07:53:06 +0800] "GET /wp-content/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.103 - - [05/May/2026:07:53:07 +0800] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.88 - - [05/May/2026:07:53:07 +0800] "GET /wp-class.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.88 - - [05/May/2026:07:53:07 +0800] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.52 - - [05/May/2026:07:53:07 +0800] "GET /wp-content/plugins/hello.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.52 - - [05/May/2026:07:53:07 +0800] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.81 - - [05/May/2026:07:53:07 +0800] "GET /xx.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.52 - - [05/May/2026:07:53:08 +0800] "GET /wp-includes/fonts/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.81 - - [05/May/2026:07:53:08 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.81 - - [05/May/2026:07:53:08 +0800] "GET /wp-includes/classwithtostring.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.96 - - [05/May/2026:07:53:08 +0800] "GET /wp-content/blue.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.96 - - [05/May/2026:07:53:09 +0800] "GET /content.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.96 - - [05/May/2026:07:53:09 +0800] "GET /wp-content/uploads/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.100 - - [05/May/2026:07:53:09 +0800] "GET /moon.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.96 - - [05/May/2026:07:53:09 +0800] "GET /wp-admin/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.96 - - [05/May/2026:07:53:10 +0800] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.100 - - [05/May/2026:07:53:10 +0800] "GET /wp-admin/user/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.100 - - [05/May/2026:07:53:10 +0800] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.60 - - [05/May/2026:07:53:10 +0800] "GET /wp-content/languages/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.100 - - [05/May/2026:07:53:10 +0800] "GET /webadmin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.60 - - [05/May/2026:07:53:10 +0800] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.100 - - [05/May/2026:07:53:10 +0800] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.60 - - [05/May/2026:07:53:11 +0800] "GET /wp-content/plugins/up/main.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.104 - - [05/May/2026:07:53:11 +0800] "GET /wp-admin/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.60 - - [05/May/2026:07:53:11 +0800] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.60 - - [05/May/2026:07:53:11 +0800] "GET /wp-admin/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.104 - - [05/May/2026:07:53:11 +0800] "GET /xl2023.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.104 - - [05/May/2026:07:53:12 +0800] "GET /go.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.60 - - [05/May/2026:07:53:12 +0800] "GET /wp-admin/includes/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.60 - - [05/May/2026:07:53:12 +0800] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.104 - - [05/May/2026:07:53:12 +0800] "GET /wp-admin/xleet.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.104 - - [05/May/2026:07:53:12 +0800] "GET /templates/beez3/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.60 - - [05/May/2026:07:53:12 +0800] "GET /images/images/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.104 - - [05/May/2026:07:53:12 +0800] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.60 - - [05/May/2026:07:53:12 +0800] "GET /images/class.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.104 - - [05/May/2026:07:53:13 +0800] "GET /.well-known/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.60 - - [05/May/2026:07:53:13 +0800] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.104 - - [05/May/2026:07:53:13 +0800] "GET /wp-includes/assets/file.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.60 - - [05/May/2026:07:53:13 +0800] "GET /web.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.60 - - [05/May/2026:07:53:13 +0800] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.98 - - [05/May/2026:07:53:13 +0800] "GET /cgi-bin/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.60 - - [05/May/2026:07:53:13 +0800] "GET /images/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.98 - - [05/May/2026:07:53:14 +0800] "GET /wp-content/uploads/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.60 - - [05/May/2026:07:53:14 +0800] "GET /wp-content/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.98 - - [05/May/2026:07:53:14 +0800] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.60 - - [05/May/2026:07:53:14 +0800] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.98 - - [05/May/2026:07:53:14 +0800] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.60 - - [05/May/2026:07:53:14 +0800] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.60 - - [05/May/2026:07:53:15 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.60 - - [05/May/2026:07:53:15 +0800] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.106 - - [05/May/2026:07:53:15 +0800] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.86 - - [05/May/2026:07:53:15 +0800] "GET /radio.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.88 - - [05/May/2026:07:53:15 +0800] "GET /wp-admin/css/colors/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.86 - - [05/May/2026:07:53:16 +0800] "GET /wp-admin/mah.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.88 - - [05/May/2026:07:53:16 +0800] "GET /warm.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.86 - - [05/May/2026:07:53:16 +0800] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.88 - - [05/May/2026:07:53:16 +0800] "GET /wp-admin/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.88 - - [05/May/2026:07:53:16 +0800] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.86 - - [05/May/2026:07:53:16 +0800] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.88 - - [05/May/2026:07:53:16 +0800] "GET /wp-includes/images/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.86 - - [05/May/2026:07:53:16 +0800] "GET /wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.86 - - [05/May/2026:07:53:17 +0800] "GET /wp-setup.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.86 - - [05/May/2026:07:53:17 +0800] "GET /ms-themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.52 - - [05/May/2026:07:53:17 +0800] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.52 - - [05/May/2026:07:53:17 +0800] "GET /blog/wp-content/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.52 - - [05/May/2026:07:53:18 +0800] "GET /hehehehe.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.52 - - [05/May/2026:07:53:18 +0800] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.52 - - [05/May/2026:07:53:18 +0800] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.52 - - [05/May/2026:07:53:18 +0800] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.52 - - [05/May/2026:07:53:19 +0800] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.52 - - [05/May/2026:07:53:19 +0800] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.52 - - [05/May/2026:07:53:19 +0800] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.52 - - [05/May/2026:07:53:20 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.52 - - [05/May/2026:07:53:20 +0800] "GET /wp-includes/Requests/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.59 - - [05/May/2026:07:53:20 +0800] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.54 - - [05/May/2026:07:53:21 +0800] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.53 - - [05/May/2026:07:53:21 +0800] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.97 - - [05/May/2026:07:53:22 +0800] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.86 - - [05/May/2026:07:53:17 +0800] "GET /wp-includes/assets/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.103 - - [05/May/2026:07:53:23 +0800] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.82.72.4 - - [05/May/2026:07:53:23 +0800] "GET /style.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.92 - - [05/May/2026:07:53:23 +0800] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.82.72.4 - - [05/May/2026:07:53:23 +0800] "GET /wp-includes/infi.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.92 - - [05/May/2026:07:53:23 +0800] "GET /wp-includes/images/media/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.83 - - [05/May/2026:07:53:24 +0800] "GET /wp-admin/maint/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.54 - - [05/May/2026:07:53:24 +0800] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.83 - - [05/May/2026:07:53:24 +0800] "GET /x.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.83 - - [05/May/2026:07:53:24 +0800] "GET /wp-includes/IXR/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.74 - - [05/May/2026:07:53:25 +0800] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.99 - - [05/May/2026:07:53:25 +0800] "GET /css/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.77 - - [05/May/2026:07:53:25 +0800] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.99 - - [05/May/2026:07:53:25 +0800] "GET /images/index22.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.99 - - [05/May/2026:07:53:25 +0800] "GET /wp-user.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.99 - - [05/May/2026:07:53:26 +0800] "GET /wp-includes/pomo/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.94 - - [05/May/2026:07:53:26 +0800] "GET /wp-includes/pomo/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:53:27 +0800] "GET /wp-admin/maint/themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.91 - - [05/May/2026:07:53:27 +0800] "GET /config.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.106 - - [05/May/2026:07:53:27 +0800] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.91 - - [05/May/2026:07:53:27 +0800] "GET /special.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:53:27 +0800] "GET /wp-includes/fonts/themes.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.91 - - [05/May/2026:07:53:27 +0800] "GET /assets/script.js.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.91 - - [05/May/2026:07:53:28 +0800] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.82.72.4 - - [05/May/2026:07:53:28 +0800] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.91 - - [05/May/2026:07:53:28 +0800] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.82.72.4 - - [05/May/2026:07:53:28 +0800] "GET /wp-includes/certificates/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.91 - - [05/May/2026:07:53:28 +0800] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.96 - - [05/May/2026:07:53:29 +0800] "GET /byp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.91 - - [05/May/2026:07:53:29 +0800] "GET /wp-content/uploads/wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.96 - - [05/May/2026:07:53:29 +0800] "GET /blog/wp-includes/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.91 - - [05/May/2026:07:53:29 +0800] "GET /wp-includes/certificates/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.96 - - [05/May/2026:07:53:29 +0800] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.95 - - [05/May/2026:07:53:29 +0800] "GET /cgi-bin/class.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.77 - - [05/May/2026:07:53:30 +0800] "GET /blog/wp-admin/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.95 - - [05/May/2026:07:53:30 +0800] "GET /wp-content/cache/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.77 - - [05/May/2026:07:53:30 +0800] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.95 - - [05/May/2026:07:53:30 +0800] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.77 - - [05/May/2026:07:53:30 +0800] "GET /wp-includes/css/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.95 - - [05/May/2026:07:53:30 +0800] "GET /wp-includes/edit.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.58 - - [05/May/2026:07:53:31 +0800] "GET /cgi-bin/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.96 - - [05/May/2026:07:53:31 +0800] "GET /webdb.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.58 - - [05/May/2026:07:53:31 +0800] "GET /wp-content/wso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.96 - - [05/May/2026:07:53:31 +0800] "GET /assets/images/doc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.58 - - [05/May/2026:07:53:31 +0800] "GET /class.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.96 - - [05/May/2026:07:53:31 +0800] "GET /file2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.58 - - [05/May/2026:07:53:32 +0800] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.96 - - [05/May/2026:07:53:32 +0800] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.98 - - [05/May/2026:07:53:32 +0800] "GET /wp-content/radio.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.59 - - [05/May/2026:07:53:32 +0800] "GET /alfa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.98 - - [05/May/2026:07:53:32 +0800] "GET /system_log.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.59 - - [05/May/2026:07:53:33 +0800] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.98 - - [05/May/2026:07:53:33 +0800] "GET /.alf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.59 - - [05/May/2026:07:53:33 +0800] "GET /wp-includes/click.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.98 - - [05/May/2026:07:53:33 +0800] "GET /wso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.98 - - [05/May/2026:07:53:33 +0800] "GET /wp-includes/blocks/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.90 - - [05/May/2026:07:53:33 +0800] "GET /.well-known/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.90 - - [05/May/2026:07:53:34 +0800] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.90 - - [05/May/2026:07:53:34 +0800] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.90 - - [05/May/2026:07:53:34 +0800] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.94 - - [05/May/2026:07:53:35 +0800] "GET /flower.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.94 - - [05/May/2026:07:53:35 +0800] "GET /wp-includes/wp-class.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.58 - - [05/May/2026:07:53:36 +0800] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.94 - - [05/May/2026:07:53:36 +0800] "GET /wp-admin/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.58 - - [05/May/2026:07:53:36 +0800] "GET /wp-content/1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.94 - - [05/May/2026:07:53:36 +0800] "GET /edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.58 - - [05/May/2026:07:53:36 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.94 - - [05/May/2026:07:53:36 +0800] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.58 - - [05/May/2026:07:53:36 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.94 - - [05/May/2026:07:53:37 +0800] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.58 - - [05/May/2026:07:53:37 +0800] "GET /setup.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.94 - - [05/May/2026:07:53:37 +0800] "GET /wp-links-opml.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.58 - - [05/May/2026:07:53:37 +0800] "GET /.bod/.ll/ss.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.94 - - [05/May/2026:07:53:37 +0800] "GET /wp-admin/user/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.58 - - [05/May/2026:07:53:37 +0800] "GET /.well-known/radio.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.94 - - [05/May/2026:07:53:37 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.58 - - [05/May/2026:07:53:38 +0800] "GET /wp-content/plugin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.94 - - [05/May/2026:07:53:38 +0800] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.58 - - [05/May/2026:07:53:38 +0800] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.58 - - [05/May/2026:07:53:38 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.53 - - [05/May/2026:07:53:38 +0800] "GET /wp-includes/xl2023.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.58 - - [05/May/2026:07:53:38 +0800] "GET /cc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.58 - - [05/May/2026:07:53:39 +0800] "GET /.well-known/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.85 - - [05/May/2026:07:53:39 +0800] "GET /wp-includes/certificates/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.58 - - [05/May/2026:07:53:39 +0800] "GET /ab.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.58 - - [05/May/2026:07:53:39 +0800] "GET /wp-content/themes/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.82 - - [05/May/2026:07:53:39 +0800] "GET /wp-includes/images/media/dog.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.58 - - [05/May/2026:07:53:39 +0800] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.58 - - [05/May/2026:07:53:40 +0800] "GET /doc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.104 - - [05/May/2026:07:53:40 +0800] "GET /xp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.104 - - [05/May/2026:07:53:40 +0800] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.98 - - [05/May/2026:07:53:41 +0800] "GET /wp-includes/assets/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.106 - - [05/May/2026:07:53:42 +0800] "GET /wp-links.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.106 - - [05/May/2026:07:53:43 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:53:43 +0800] "GET /wp-includes/css/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.94 - - [05/May/2026:07:53:43 +0800] "GET /wp-includes/ID3/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.80 - - [05/May/2026:07:53:44 +0800] "GET /wp-includes/pomo/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.107 - - [05/May/2026:07:53:44 +0800] "GET /wp-includes/IXR/security.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.84 - - [05/May/2026:07:53:45 +0800] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.84 - - [05/May/2026:07:53:45 +0800] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.83 - - [05/May/2026:07:53:46 +0800] "GET /wp-content/plugins/hello.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.83 - - [05/May/2026:07:53:46 +0800] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.83 - - [05/May/2026:07:53:46 +0800] "GET /wp-includes/fonts/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.91 - - [05/May/2026:07:53:47 +0800] "GET /moon.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.91 - - [05/May/2026:07:53:47 +0800] "GET /wp-admin/user/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.91 - - [05/May/2026:07:53:48 +0800] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.91 - - [05/May/2026:07:53:48 +0800] "GET /webadmin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.91 - - [05/May/2026:07:53:48 +0800] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.82.72.4 - - [05/May/2026:07:53:49 +0800] "GET /wp-admin/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.82.72.4 - - [05/May/2026:07:53:49 +0800] "GET /xl2023.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.82.72.4 - - [05/May/2026:07:53:49 +0800] "GET /go.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.58 - - [05/May/2026:07:53:40 +0800] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.82.72.4 - - [05/May/2026:07:53:49 +0800] "GET /wp-admin/xleet.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.82.72.4 - - [05/May/2026:07:53:50 +0800] "GET /templates/beez3/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.55 - - [05/May/2026:07:53:50 +0800] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.82.72.4 - - [05/May/2026:07:53:50 +0800] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.82.72.4 - - [05/May/2026:07:53:50 +0800] "GET /.well-known/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.82 - - [05/May/2026:07:53:50 +0800] "GET /mar.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.82.72.4 - - [05/May/2026:07:53:51 +0800] "GET /wp-includes/assets/file.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.82 - - [05/May/2026:07:53:51 +0800] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.102 - - [05/May/2026:07:53:51 +0800] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.110 - - [05/May/2026:07:53:51 +0800] "GET /cgi-bin/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:53:51 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.110 - - [05/May/2026:07:53:51 +0800] "GET /wp-content/uploads/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.110 - - [05/May/2026:07:53:52 +0800] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.102 - - [05/May/2026:07:53:52 +0800] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.110 - - [05/May/2026:07:53:52 +0800] "GET /wp-includes/style-engine/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.88 - - [05/May/2026:07:53:53 +0800] "GET /js/fm.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.88 - - [05/May/2026:07:53:53 +0800] "GET /wp-admin/images/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.88 - - [05/May/2026:07:53:53 +0800] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.88 - - [05/May/2026:07:53:53 +0800] "GET /wp-content/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.92 - - [05/May/2026:07:53:53 +0800] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.88 - - [05/May/2026:07:53:54 +0800] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.82 - - [05/May/2026:07:53:54 +0800] "GET /fm.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.102 - - [05/May/2026:07:53:55 +0800] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.102 - - [05/May/2026:07:53:55 +0800] "GET /adminfuns.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:53:55 +0800] "GET /wp-admin/images/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.102 - - [05/May/2026:07:53:56 +0800] "GET /ini.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.102 - - [05/May/2026:07:53:56 +0800] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:53:56 +0800] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.79 - - [05/May/2026:07:53:57 +0800] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.79 - - [05/May/2026:07:53:57 +0800] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.79 - - [05/May/2026:07:53:58 +0800] "GET /wp-admin/js/instaall.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.79 - - [05/May/2026:07:53:58 +0800] "GET /wp-includes/function.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.80 - - [05/May/2026:07:53:59 +0800] "GET /wp-includes/plugins.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.112 - - [05/May/2026:07:53:59 +0800] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.112 - - [05/May/2026:07:53:59 +0800] "GET /wp-content.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.112 - - [05/May/2026:07:54:00 +0800] "GET /wp-includes/css/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.111 - - [05/May/2026:07:54:00 +0800] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.59 - - [05/May/2026:07:54:01 +0800] "GET /wp-admin/network/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.59 - - [05/May/2026:07:54:01 +0800] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.59 - - [05/May/2026:07:54:01 +0800] "GET /customize.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.59 - - [05/May/2026:07:54:02 +0800] "GET /license.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.59 - - [05/May/2026:07:54:02 +0800] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.59 - - [05/May/2026:07:54:02 +0800] "GET /lock.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.59 - - [05/May/2026:07:54:02 +0800] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.59 - - [05/May/2026:07:54:03 +0800] "GET /wp-includes/atomlib.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.53 - - [05/May/2026:07:54:03 +0800] "GET /wp-includes/rest-api/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.92 - - [05/May/2026:07:54:04 +0800] "GET /.well-known/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.92 - - [05/May/2026:07:54:04 +0800] "GET /.well-known/wincust.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.92 - - [05/May/2026:07:54:04 +0800] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.92 - - [05/May/2026:07:54:05 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.92 - - [05/May/2026:07:54:05 +0800] "GET /wp-includes/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.82 - - [05/May/2026:07:54:05 +0800] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.96 - - [05/May/2026:07:54:06 +0800] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.101 - - [05/May/2026:07:54:08 +0800] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.101 - - [05/May/2026:07:54:08 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.101 - - [05/May/2026:07:54:08 +0800] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.101 - - [05/May/2026:07:54:08 +0800] "GET /fonts/database.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.101 - - [05/May/2026:07:54:09 +0800] "GET /ff2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.101 - - [05/May/2026:07:54:09 +0800] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.57 - - [05/May/2026:07:54:10 +0800] "GET /wp-admin/plugin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.57 - - [05/May/2026:07:54:10 +0800] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.111 - - [05/May/2026:07:54:10 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.111 - - [05/May/2026:07:54:11 +0800] "GET /wp-atom.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.111 - - [05/May/2026:07:54:11 +0800] "GET /wp-admin/css/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.111 - - [05/May/2026:07:54:11 +0800] "GET /up.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.111 - - [05/May/2026:07:54:11 +0800] "GET /wp-content/uploads/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.111 - - [05/May/2026:07:54:12 +0800] "GET /assets/images/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.111 - - [05/May/2026:07:54:12 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.111 - - [05/May/2026:07:54:12 +0800] "GET /js/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.111 - - [05/May/2026:07:54:13 +0800] "GET /simple/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.111 - - [05/May/2026:07:54:13 +0800] "GET /worm.PhP HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.111 - - [05/May/2026:07:54:13 +0800] "GET /ext.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.111 - - [05/May/2026:07:54:13 +0800] "GET /delpaths.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.111 - - [05/May/2026:07:54:14 +0800] "GET /.well-known/pki-validation/1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.111 - - [05/May/2026:07:54:14 +0800] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.111 - - [05/May/2026:07:54:14 +0800] "GET /.well-known/pki-validation/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.111 - - [05/May/2026:07:54:15 +0800] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.111 - - [05/May/2026:07:54:15 +0800] "GET /gifclass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.111 - - [05/May/2026:07:54:15 +0800] "GET /plugin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.111 - - [05/May/2026:07:54:15 +0800] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.111 - - [05/May/2026:07:54:16 +0800] "GET /update-core.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.111 - - [05/May/2026:07:54:16 +0800] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.111 - - [05/May/2026:07:54:16 +0800] "GET /wp-mail.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.111 - - [05/May/2026:07:54:17 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.111 - - [05/May/2026:07:54:17 +0800] "GET /wp-admin/defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.111 - - [05/May/2026:07:54:17 +0800] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.111 - - [05/May/2026:07:54:17 +0800] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.111 - - [05/May/2026:07:54:18 +0800] "GET /wp-admin/maint/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.111 - - [05/May/2026:07:54:18 +0800] "GET /wp-admin/js/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.111 - - [05/May/2026:07:54:18 +0800] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.111 - - [05/May/2026:07:54:18 +0800] "GET /wp-admin/maint/maint.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.111 - - [05/May/2026:07:54:19 +0800] "GET /assets/bypass.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.111 - - [05/May/2026:07:54:19 +0800] "GET /aa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.111 - - [05/May/2026:07:54:19 +0800] "GET /index2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.111 - - [05/May/2026:07:54:20 +0800] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.111 - - [05/May/2026:07:54:20 +0800] "GET /wp-admin/network/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.111 - - [05/May/2026:07:54:20 +0800] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.111 - - [05/May/2026:07:54:20 +0800] "GET /wp-content/languages/plugins.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.111 - - [05/May/2026:07:54:21 +0800] "GET /shell.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.111 - - [05/May/2026:07:54:21 +0800] "GET /.well-known/content.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.111 - - [05/May/2026:07:54:21 +0800] "GET /wp-includes/Text/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.51 - - [05/May/2026:07:54:23 +0800] "GET /wp-admin/network/atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.51 - - [05/May/2026:07:54:23 +0800] "GET /.well-known/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.51 - - [05/May/2026:07:54:23 +0800] "GET /hehe.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.51 - - [05/May/2026:07:54:24 +0800] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.97 - - [05/May/2026:07:54:24 +0800] "GET /css/slider.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.97 - - [05/May/2026:07:54:25 +0800] "GET /dir.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.97 - - [05/May/2026:07:54:25 +0800] "GET /wp-includes/css/atomlib.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.100 - - [05/May/2026:07:54:25 +0800] "GET /wp-content/style.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.100 - - [05/May/2026:07:54:26 +0800] "GET /libraries/phpmailer/updates.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.100 - - [05/May/2026:07:54:26 +0800] "GET /nf_tracking.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.100 - - [05/May/2026:07:54:26 +0800] "GET /wp-admin/css/about.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.100 - - [05/May/2026:07:54:26 +0800] "GET /filefuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.100 - - [05/May/2026:07:54:27 +0800] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.100 - - [05/May/2026:07:54:27 +0800] "GET /l.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.100 - - [05/May/2026:07:54:27 +0800] "GET /repeater.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.100 - - [05/May/2026:07:54:28 +0800] "GET /wp-admin/wso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.100 - - [05/May/2026:07:54:28 +0800] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.56 - - [05/May/2026:07:54:28 +0800] "GET /contacts.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.56 - - [05/May/2026:07:54:29 +0800] "GET /wsa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.56 - - [05/May/2026:07:54:29 +0800] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.75 - - [05/May/2026:07:54:30 +0800] "GET /firewall.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.75 - - [05/May/2026:07:54:30 +0800] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.82.72.3 - - [05/May/2026:07:54:30 +0800] "GET /wp-content/uploads/content.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.82.72.3 - - [05/May/2026:07:54:31 +0800] "GET /lv.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.82.72.3 - - [05/May/2026:07:54:31 +0800] "GET /images/js1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.82.72.3 - - [05/May/2026:07:54:31 +0800] "GET /wp-admin/maint/file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.82.72.3 - - [05/May/2026:07:54:31 +0800] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.82.72.3 - - [05/May/2026:07:54:32 +0800] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.82.72.3 - - [05/May/2026:07:54:32 +0800] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.78 - - [05/May/2026:07:54:33 +0800] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.111 - - [05/May/2026:07:54:33 +0800] "GET /wp-admin/theme-editor.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.111 - - [05/May/2026:07:54:33 +0800] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.111 - - [05/May/2026:07:54:34 +0800] "GET /wp-admin/maint/wonder.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.111 - - [05/May/2026:07:54:34 +0800] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.111 - - [05/May/2026:07:54:34 +0800] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.111 - - [05/May/2026:07:54:34 +0800] "GET /tox.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.111 - - [05/May/2026:07:54:35 +0800] "GET /wp-content/languages/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.111 - - [05/May/2026:07:54:35 +0800] "GET /wp-includes/js/dist/default.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.56 - - [05/May/2026:07:54:36 +0800] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.56 - - [05/May/2026:07:54:36 +0800] "GET /tiny.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.73 - - [05/May/2026:07:54:36 +0800] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.73 - - [05/May/2026:07:54:37 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.73 - - [05/May/2026:07:54:37 +0800] "GET /wp-themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.73 - - [05/May/2026:07:54:37 +0800] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.89 - - [05/May/2026:07:54:38 +0800] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.89 - - [05/May/2026:07:54:38 +0800] "GET /mariju.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.89 - - [05/May/2026:07:54:38 +0800] "GET /waf_defender.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.89 - - [05/May/2026:07:54:39 +0800] "GET /wp-admin/maint/cong.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.89 - - [05/May/2026:07:54:39 +0800] "GET /av.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.89 - - [05/May/2026:07:54:39 +0800] "GET /wp-admin/css/glex.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.89 - - [05/May/2026:07:54:39 +0800] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.89 - - [05/May/2026:07:54:40 +0800] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.59 - - [05/May/2026:07:54:41 +0800] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.59 - - [05/May/2026:07:54:42 +0800] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.59 - - [05/May/2026:07:54:42 +0800] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.59 - - [05/May/2026:07:54:42 +0800] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.100 - - [05/May/2026:07:54:43 +0800] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.100 - - [05/May/2026:07:54:43 +0800] "GET /theme.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.100 - - [05/May/2026:07:54:43 +0800] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.100 - - [05/May/2026:07:54:43 +0800] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.100 - - [05/May/2026:07:54:48 +0800] "GET /Simple.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.100 - - [05/May/2026:07:54:48 +0800] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.100 - - [05/May/2026:07:54:48 +0800] "GET /wp-admin/1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.100 - - [05/May/2026:07:54:49 +0800] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.100 - - [05/May/2026:07:54:49 +0800] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.100 - - [05/May/2026:07:54:49 +0800] "GET /.well-known/classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.100 - - [05/May/2026:07:54:50 +0800] "GET /css/av.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.100 - - [05/May/2026:07:54:50 +0800] "GET /images/waf_defender.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.100 - - [05/May/2026:07:54:50 +0800] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.91 - - [05/May/2026:07:54:51 +0800] "GET /small.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.91 - - [05/May/2026:07:54:51 +0800] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:03 +0800] "GET /update/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:03 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:03 +0800] "GET /wp-admin/maint/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.106 - - [05/May/2026:07:55:03 +0800] "GET /themes/zMousse/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:04 +0800] "GET /wp-content/plugins/ubh/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.106 - - [05/May/2026:07:55:04 +0800] "GET /wp-admin/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.106 - - [05/May/2026:07:55:04 +0800] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.106 - - [05/May/2026:07:55:04 +0800] "GET /wp-content/themes/pridmag/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.106 - - [05/May/2026:07:55:05 +0800] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:05 +0800] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:05 +0800] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:05 +0800] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:06 +0800] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:06 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:06 +0800] "GET /wp-includes/style-engine/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:07 +0800] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.106 - - [05/May/2026:07:55:07 +0800] "GET /wp-content/plugins/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:07 +0800] "GET /js/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:07 +0800] "GET /.well-known/pki-validation/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:08 +0800] "GET /wp-includes/js/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.106 - - [05/May/2026:07:55:08 +0800] "GET /wp-content/upgrade/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:08 +0800] "GET /wp-content/languages/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.106 - - [05/May/2026:07:55:08 +0800] "GET /wp-content/themes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:09 +0800] "GET /wp-content/plugins/elementor/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.106 - - [05/May/2026:07:55:09 +0800] "GET /wp-includes/IXR/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:09 +0800] "GET /wp-includes/widgets/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.106 - - [05/May/2026:07:55:10 +0800] "GET /wp-includes/images/smilies/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:10 +0800] "GET /wp-includes/js/crop/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:10 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:10 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.106 - - [05/May/2026:07:55:11 +0800] "GET /wp-admin/js/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.106 - - [05/May/2026:07:55:11 +0800] "GET /wp-includes/js/jquery/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.106 - - [05/May/2026:07:55:11 +0800] "GET /wp-includes/block-supports/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:11 +0800] "GET /wp-admin/network/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.106 - - [05/May/2026:07:55:12 +0800] "GET /wp-admin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.106 - - [05/May/2026:07:55:12 +0800] "GET /wp-includes/blocks/table/int/tmpl/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.106 - - [05/May/2026:07:55:12 +0800] "GET /wp-includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:12 +0800] "GET /wp-includes/customize/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:13 +0800] "GET /wp-includes/SimplePie/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.106 - - [05/May/2026:07:55:13 +0800] "GET /wp-includes/theme-compat/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:13 +0800] "GET /wp-includes/Requests/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:14 +0800] "GET /wp-includes/ID3/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:14 +0800] "GET /wp-content/x/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:14 +0800] "GET /wp-includes/assets/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:14 +0800] "GET /wp-includes/fonts/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.106 - - [05/May/2026:07:55:15 +0800] "GET /autoload_classmap/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:15 +0800] "GET /wp-content/themes/tflow/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:15 +0800] "GET /templates/beez3/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.106 - - [05/May/2026:07:55:15 +0800] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:16 +0800] "GET /components/com_jea/views/form/tmpl/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.106 - - [05/May/2026:07:55:16 +0800] "GET /templates/beez/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:16 +0800] "GET /wp-admin/css/colors/light/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:17 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:17 +0800] "GET /wp-includes/rest-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.106 - - [05/May/2026:07:55:17 +0800] "GET /css/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:17 +0800] "GET /wp-admin/user/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.106 - - [05/May/2026:07:55:18 +0800] "GET /assets/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.106 - - [05/May/2026:07:55:18 +0800] "GET /wp-admin/css/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.106 - - [05/May/2026:07:55:18 +0800] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:18 +0800] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.106 - - [05/May/2026:07:55:19 +0800] "GET /wp-content/plugins/up/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:23 +0800] "GET /fonts/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:23 +0800] "GET /wp-admin/includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:23 +0800] "GET /images/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.106 - - [05/May/2026:07:55:23 +0800] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.106 - - [05/May/2026:07:55:24 +0800] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.106 - - [05/May/2026:07:55:24 +0800] "GET /wp-includes/pomo/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.106 - - [05/May/2026:07:55:24 +0800] "GET /wp-content/themes/twentytwentythree/patterns/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.106 - - [05/May/2026:07:55:24 +0800] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:25 +0800] "GET /wp-includes/block-patterns/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.106 - - [05/May/2026:07:55:25 +0800] "GET /wp-includes/certificates/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:25 +0800] "GET /wp-content/cache/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:26 +0800] "GET /assets/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:26 +0800] "GET /wp-admin/js/widgets/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.106 - - [05/May/2026:07:55:26 +0800] "GET /wp-includes/random_compat/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.106 - - [05/May/2026:07:55:26 +0800] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:27 +0800] "GET /wp-includes/images/media/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.106 - - [05/May/2026:07:55:27 +0800] "GET /wp-includes/css/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.106 - - [05/May/2026:07:55:27 +0800] "GET /wp-content/plugins/phpadmin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:27 +0800] "GET /wp-content/plugins/seoo/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.106 - - [05/May/2026:07:55:28 +0800] "GET /wp-content/plugins/view-more/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:28 +0800] "GET /wp-admin/css/colors/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:28 +0800] "GET /wp-content/themes/seotheme/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:29 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:29 +0800] "GET /wp-content/plugins/ioxi/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.106 - - [05/May/2026:07:55:29 +0800] "GET /blog/wp-content/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.106 - - [05/May/2026:07:55:29 +0800] "GET /.well-known/acme-challenge/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.106 - - [05/May/2026:07:55:30 +0800] "GET /wp-content/themes/astra/inc/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.106 - - [05/May/2026:07:55:30 +0800] "GET /wp-content/plugins/ccx/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.106 - - [05/May/2026:07:55:30 +0800] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.106 - - [05/May/2026:07:55:30 +0800] "GET /wp-includes/Requests/src/Exception/Http/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:31 +0800] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.106 - - [05/May/2026:07:55:31 +0800] "GET /wp-includes/Text/Diff/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:31 +0800] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.106 - - [05/May/2026:07:55:32 +0800] "GET /wp-content/themes/twentytwentytwo/assets/fonts/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:32 +0800] "GET /blog/wp-includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:32 +0800] "GET /blog/wp-admin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:32 +0800] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:33 +0800] "GET /wp-includes/blocks/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.106 - - [05/May/2026:07:55:33 +0800] "GET /.bod/.ll/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.106 - - [05/May/2026:07:55:33 +0800] "GET /wp-content/themes/twentytwentytwo/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:34 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:34 +0800] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.102 - - [05/May/2026:07:55:34 +0800] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:35 +0800] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.102 - - [05/May/2026:07:55:35 +0800] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.102 - - [05/May/2026:07:55:35 +0800] "GET /wp-content/plugins/fix/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.102 - - [05/May/2026:07:55:35 +0800] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:36 +0800] "GET /wp-includes/bk/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:36 +0800] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.102 - - [05/May/2026:07:55:36 +0800] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.102 - - [05/May/2026:07:55:37 +0800] "GET /wp-content/themes/hello-element/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:37 +0800] "GET /wp-includes/Text/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:37 +0800] "GET /wp-includes/sitemaps/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.102 - - [05/May/2026:07:55:37 +0800] "GET /wp-includes/sodium_compat/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.102 - - [05/May/2026:07:55:38 +0800] "GET /wp-includes/js/dist/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.102 - - [05/May/2026:07:55:38 +0800] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:38 +0800] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:39 +0800] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.102 - - [05/May/2026:07:55:39 +0800] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:39 +0800] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:39 +0800] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:40 +0800] "GET /wp-content/languages/themes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.102 - - [05/May/2026:07:55:40 +0800] "GET /admin/controller/extension/extension/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:40 +0800] "GET /img/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:40 +0800] "GET /wp-includes/interactivity-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:41 +0800] "GET /wp-includes/l10n/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:41 +0800] "GET /tinyfilemanager/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.102 - - [05/May/2026:07:55:41 +0800] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.102 - - [05/May/2026:07:55:42 +0800] "GET /components/com_newsfeeds/models/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.102 - - [05/May/2026:07:55:42 +0800] "GET /.trash7309/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:42 +0800] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.102 - - [05/May/2026:07:55:42 +0800] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:43 +0800] "GET /modules/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:43 +0800] "GET /wp-includes/js/codemirror/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.102 - - [05/May/2026:07:55:43 +0800] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:44 +0800] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.102 - - [05/May/2026:07:55:44 +0800] "GET /wp-includes/blocks/group/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:44 +0800] "GET /plugins/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.102 - - [05/May/2026:07:55:44 +0800] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.102 - - [05/May/2026:07:55:45 +0800] "GET /upload/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.102 - - [05/May/2026:07:55:45 +0800] "GET /wordpress/wp-includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:45 +0800] "GET /wp-includes/css/dist/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.102 - - [05/May/2026:07:55:46 +0800] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.102 - - [05/May/2026:07:55:46 +0800] "GET /.tmb/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.102 - - [05/May/2026:07:55:46 +0800] "GET /wp-includes/assets/wp-includes/assets/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:46 +0800] "GET /wp-includes/blocks/file/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.102 - - [05/May/2026:07:55:47 +0800] "GET /wp-content/mu-plugins/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.102 - - [05/May/2026:07:55:47 +0800] "GET /blog/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:47 +0800] "GET /include/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.102 - - [05/May/2026:07:55:48 +0800] "GET /file/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.102 - - [05/May/2026:07:55:48 +0800] "GET /wp-content/themes/twentytwentyfour/patterns/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:48 +0800] "GET /images/news_event/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.102 - - [05/May/2026:07:55:48 +0800] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:49 +0800] "GET /templates/beez5/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.102 - - [05/May/2026:07:55:49 +0800] "GET /wp-admin/js/file/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.102 - - [05/May/2026:07:55:49 +0800] "GET /wp-includes/id3/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.102 - - [05/May/2026:07:55:49 +0800] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.102 - - [05/May/2026:07:55:50 +0800] "GET /upload/bilder/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.102 - - [05/May/2026:07:55:50 +0800] "GET /wp-includes/Requests/Text/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.102 - - [05/May/2026:07:55:50 +0800] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.102 - - [05/May/2026:07:55:51 +0800] "GET /wp-includes/js/jcrop/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.102 - - [05/May/2026:07:55:51 +0800] "GET /wp-content/uploads/2021/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.102 - - [05/May/2026:07:55:51 +0800] "GET /assets/js/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.102 - - [05/May/2026:07:55:51 +0800] "GET /wp-includes/block-bindings/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.102 - - [05/May/2026:07:55:52 +0800] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:52 +0800] "GET /wp-includes/Requests/library/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:52 +0800] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:53 +0800] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.102 - - [05/May/2026:07:55:53 +0800] "GET /backup/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:53 +0800] "GET /files/shares/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:53 +0800] "GET /wp-content/plugins/xt/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.102 - - [05/May/2026:07:55:54 +0800] "GET /wp-content/plugins/content-management/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.102 - - [05/May/2026:07:55:54 +0800] "GET /wp-content/themes/Avada/licensing/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:54 +0800] "GET /Requests/Utility/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.102 - - [05/May/2026:07:55:57 +0800] "GET /themes/travelscape/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:58 +0800] "GET /themes/twentyseventeen/page/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:58 +0800] "GET /rest-api/fields/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.102 - - [05/May/2026:07:55:58 +0800] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:58 +0800] "GET /wp-content/plugins/tunnelforms/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.102 - - [05/May/2026:07:55:59 +0800] "GET /wp-content/languages/plugins/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.102 - - [05/May/2026:07:55:59 +0800] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:55:59 +0800] "GET /wp-includes/js/tinymce/utils/%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:56:00 +0800] "GET /themes/seotheme/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:56:00 +0800] "GET /wp-includes/js/jquery/ui/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:56:00 +0800] "GET /js/tinymce/utils/%20 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:56:00 +0800] "GET /Requests/Exception/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:56:01 +0800] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:56:01 +0800] "GET /wp-json/wp/v2/give_forms/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:56:01 +0800] "GET /wp-content/plugins/ultimate-member/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:56:02 +0800] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.102 - - [05/May/2026:07:56:02 +0800] "GET /wp-content/themes/travelscape/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:56:02 +0800] "GET /wp-includes/js/plupload/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:56:02 +0800] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.102 - - [05/May/2026:07:56:03 +0800] "GET /wp-includes/images/wlw/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:56:03 +0800] "GET /wp-includes/blocks/code/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:56:03 +0800] "GET /wp-includes/blocks/archives/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:56:04 +0800] "GET /wp-includes/css/dist/components/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:56:04 +0800] "GET /wp-content/plugins/js-support-ticket/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:56:04 +0800] "GET /wp-content/plugins/easy-themes-manager/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:56:04 +0800] "GET /wp-content/settings/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.102 - - [05/May/2026:07:56:05 +0800] "GET /wp-includes/blocks/pullquote/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.53 - - [05/May/2026:07:56:05 +0800] "GET /wp-content/plugins/shell/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.53 - - [05/May/2026:07:56:05 +0800] "GET /wp-admin/images/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.53 - - [05/May/2026:07:56:06 +0800] "GET /wp-includes/blocks/comments-pagination-numbers/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.53 - - [05/May/2026:07:56:06 +0800] "GET /wp-admin/user/interactivity-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.53 - - [05/May/2026:07:56:06 +0800] "GET /assets/bootstrap-fileupload/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.53 - - [05/May/2026:07:56:07 +0800] "GET /wp-content/plugins/yanierin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.53 - - [05/May/2026:07:56:07 +0800] "GET /wp-content/themes/hideo/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.53 - - [05/May/2026:07:56:07 +0800] "GET /wp-content/plugins/profile-builder/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.53 - - [05/May/2026:07:56:07 +0800] "GET /wp-content/plugins/plugin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.53 - - [05/May/2026:07:56:08 +0800] "GET /wp-admin/network/cache/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.53 - - [05/May/2026:07:56:08 +0800] "GET /wp-includes/blocks/details/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.53 - - [05/May/2026:07:56:08 +0800] "GET /wp-includes/blocks/post-terms/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.53 - - [05/May/2026:07:56:08 +0800] "GET /wp-includes/theme-compat/network/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.53 - - [05/May/2026:07:56:09 +0800] "GET /wp-includes/js/dist/development/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.53 - - [05/May/2026:07:56:09 +0800] "GET /management/assets/assets/css/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.53 - - [05/May/2026:07:56:09 +0800] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.53 - - [05/May/2026:07:56:11 +0800] "GET /wordpress/wp-includes/blocks/accordion/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.53 - - [05/May/2026:07:56:11 +0800] "GET /assets/worders_front/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.53 - - [05/May/2026:07:56:11 +0800] "GET /assets/jquery-ui/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.53 - - [05/May/2026:07:56:12 +0800] "GET /wp-content/uploads/2024/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.53 - - [05/May/2026:07:56:12 +0800] "GET /wp-content/themes/Avada/includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.53 - - [05/May/2026:07:56:12 +0800] "GET /wp-content/uploads/fusion-forms/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.53 - - [05/May/2026:07:56:13 +0800] "GET /wp-content/themes/Avada/includes/lib/inc/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.53 - - [05/May/2026:07:56:13 +0800] "GET /wp-content/themes/jupiter/framework/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.53 - - [05/May/2026:07:56:13 +0800] "GET /wp-includes/blocks/site-title/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.53 - - [05/May/2026:07:56:13 +0800] "GET /wp-content/plugins/jupiterx-core/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.53 - - [05/May/2026:07:56:14 +0800] "GET /wp-content/themes/Avada/shortcodes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.53 - - [05/May/2026:07:56:14 +0800] "GET /wp-json/bricks/v1/render_element/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.53 - - [05/May/2026:07:56:14 +0800] "GET /wp-content/themes/bricks/includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.53 - - [05/May/2026:07:56:14 +0800] "GET /wp-content/themes/service-finder/inc/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.53 - - [05/May/2026:07:56:15 +0800] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.53 - - [05/May/2026:07:56:15 +0800] "GET /wp-content/themes/service-finder/admin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.53 - - [05/May/2026:07:56:15 +0800] "GET /wp-json/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.53 - - [05/May/2026:07:56:16 +0800] "GET /wp-json/wp/v2/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.53 - - [05/May/2026:07:56:16 +0800] "GET /wp-content/uploads/2025/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.53 - - [05/May/2026:07:56:16 +0800] "GET /wp-content/uploads/2026/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.53 - - [05/May/2026:07:56:16 +0800] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 4.204.197.96 - - [05/May/2026:08:14:53 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:53 +0800] "GET /yellow.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:53 +0800] "GET /wp-thi.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:53 +0800] "GET /wp-slss.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:54 +0800] "GET /wp-load.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:54 +0800] "GET /lib.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:54 +0800] "GET /ah25.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:54 +0800] "GET /revealability.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:55 +0800] "GET /file4.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:55 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:55 +0800] "GET /file30.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:55 +0800] "GET /forbidals.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:55 +0800] "GET /wp-firewall.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:56 +0800] "GET /tires.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:56 +0800] "GET /shell20211028.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:56 +0800] "GET /wuasr.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:56 +0800] "GET /1index.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:56 +0800] "GET /ff1.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:57 +0800] "GET /png.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:57 +0800] "GET /x.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:57 +0800] "GET /yas.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:57 +0800] "GET /dropdown.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:57 +0800] "GET /wp-access.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:58 +0800] "GET /fun.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:58 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:58 +0800] "GET /wp-kd4xalrg7m.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:58 +0800] "GET /333.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:58 +0800] "GET /explorer/index_.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:59 +0800] "GET /ftde.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:59 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:59 +0800] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:59 +0800] "GET /new.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:14:59 +0800] "GET /aevly.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:15:00 +0800] "GET /app.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:15:00 +0800] "GET /txets.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:15:00 +0800] "GET /file59.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:15:00 +0800] "GET /albin.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:15:01 +0800] "GET /lala.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:15:01 +0800] "GET /wp-at.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:15:01 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:15:01 +0800] "GET /sys.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:15:01 +0800] "GET /lv.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:15:02 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:15:02 +0800] "GET /db.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:15:02 +0800] "GET /z.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:15:02 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:15:02 +0800] "GET /ok.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:15:03 +0800] "GET /ccou.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:15:03 +0800] "GET /samll.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:15:03 +0800] "GET /edit.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:15:03 +0800] "GET /xda.php HTTP/1.1" 403 261 "-" "-" 4.204.197.96 - - [05/May/2026:08:15:03 +0800] "GET /sbhu.php HTTP/1.1" 403 261 "-" "-" 52.141.21.220 - - [05/May/2026:09:18:26 +0800] "GET /xleet.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.21.220 - - [05/May/2026:09:18:27 +0800] "GET /xmrlpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.21.220 - - [05/May/2026:09:18:27 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.21.220 - - [05/May/2026:09:18:27 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.21.220 - - [05/May/2026:09:18:27 +0800] "GET /a.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.21.220 - - [05/May/2026:09:18:27 +0800] "GET /aa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.21.220 - - [05/May/2026:09:18:27 +0800] "GET /aaa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.21.220 - - [05/May/2026:09:18:27 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.21.220 - - [05/May/2026:09:18:28 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.21.220 - - [05/May/2026:09:18:28 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.21.220 - - [05/May/2026:09:18:28 +0800] "GET /admin/controller/extension/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.21.220 - - [05/May/2026:09:18:28 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.21.220 - - [05/May/2026:09:18:28 +0800] "GET /alfa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.21.220 - - [05/May/2026:09:18:28 +0800] "GET /anonse/lock360.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.21.220 - - [05/May/2026:09:18:28 +0800] "GET /archive.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.21.220 - - [05/May/2026:09:18:29 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.21.220 - - [05/May/2026:09:18:29 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.21.220 - - [05/May/2026:09:18:29 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.21.220 - - [05/May/2026:09:18:29 +0800] "GET /config.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.21.220 - - [05/May/2026:09:18:29 +0800] "GET /cookie.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.21.220 - - [05/May/2026:09:18:29 +0800] "GET /core.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.21.220 - - [05/May/2026:09:18:29 +0800] "GET /css/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.21.220 - - [05/May/2026:09:18:30 +0800] "GET /default.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.21.220 - - [05/May/2026:09:18:31 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.21.220 - - [05/May/2026:09:18:31 +0800] "GET /dropdown.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.21.220 - - [05/May/2026:09:18:31 +0800] "GET /edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.21.220 - - [05/May/2026:09:18:31 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.74.83.40 - - [05/May/2026:12:29:38 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.74.83.40 - - [05/May/2026:12:29:38 +0800] "GET /functions.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.74.83.40 - - [05/May/2026:12:29:38 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.74.83.40 - - [05/May/2026:12:29:38 +0800] "GET /images/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.74.83.40 - - [05/May/2026:12:29:38 +0800] "GET /index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.74.83.40 - - [05/May/2026:12:29:39 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.74.83.40 - - [05/May/2026:12:29:39 +0800] "GET /install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.74.83.40 - - [05/May/2026:12:29:39 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.74.83.40 - - [05/May/2026:12:29:39 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.74.83.40 - - [05/May/2026:12:29:39 +0800] "GET /lock360.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.74.83.40 - - [05/May/2026:12:29:39 +0800] "GET /meta.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.74.83.40 - - [05/May/2026:12:29:39 +0800] "GET /new.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.74.83.40 - - [05/May/2026:12:29:40 +0800] "GET /packed.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.74.83.40 - - [05/May/2026:12:29:40 +0800] "GET /randkeyword.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.74.83.40 - - [05/May/2026:12:29:40 +0800] "GET /root.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.74.83.40 - - [05/May/2026:12:29:40 +0800] "GET /system.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.74.83.40 - - [05/May/2026:12:29:40 +0800] "GET /system_log.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.74.83.40 - - [05/May/2026:12:29:40 +0800] "GET /theme.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.74.83.40 - - [05/May/2026:12:29:40 +0800] "GET /updates.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.74.83.40 - - [05/May/2026:12:29:41 +0800] "GET /wp-admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.74.83.40 - - [05/May/2026:12:29:41 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.74.83.40 - - [05/May/2026:12:29:41 +0800] "GET /wp-includes/fonts/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.74.83.40 - - [05/May/2026:12:29:41 +0800] "GET /wp-index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.74.83.40 - - [05/May/2026:12:29:41 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.74.83.40 - - [05/May/2026:12:29:41 +0800] "GET /wso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.227.233 - - [05/May/2026:18:05:31 +0800] "GET /xleet.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.227.233 - - [05/May/2026:18:05:31 +0800] "GET /xmrlpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.227.233 - - [05/May/2026:18:05:31 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.227.233 - - [05/May/2026:18:05:31 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.227.233 - - [05/May/2026:18:05:31 +0800] "GET /a.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.227.233 - - [05/May/2026:18:05:31 +0800] "GET /aa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.227.233 - - [05/May/2026:18:05:31 +0800] "GET /aaa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.227.233 - - [05/May/2026:18:05:31 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.227.233 - - [05/May/2026:18:05:31 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.227.233 - - [05/May/2026:18:05:31 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.227.233 - - [05/May/2026:18:05:31 +0800] "GET /admin/controller/extension/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.227.233 - - [05/May/2026:18:05:32 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.227.233 - - [05/May/2026:18:05:32 +0800] "GET /alfa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.227.233 - - [05/May/2026:18:05:32 +0800] "GET /anonse/lock360.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.227.233 - - [05/May/2026:18:05:32 +0800] "GET /archive.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.227.233 - - [05/May/2026:18:05:32 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.227.233 - - [05/May/2026:18:05:32 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.227.233 - - [05/May/2026:18:05:32 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.227.233 - - [05/May/2026:18:05:32 +0800] "GET /config.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.227.233 - - [05/May/2026:18:05:32 +0800] "GET /cookie.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.227.233 - - [05/May/2026:18:05:32 +0800] "GET /core.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.227.233 - - [05/May/2026:18:05:32 +0800] "GET /css/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.227.233 - - [05/May/2026:18:05:33 +0800] "GET /default.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.227.233 - - [05/May/2026:18:05:33 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.227.233 - - [05/May/2026:18:05:33 +0800] "GET /dropdown.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.227.233 - - [05/May/2026:18:05:33 +0800] "GET /edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.227.233 - - [05/May/2026:18:05:33 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.7.175.183 - - [05/May/2026:20:19:16 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 94.19.10.143 - - [05/May/2026:20:25:55 +0800] "GET /wp-content/plugins/wp-automatic/css/wp-automatic.css HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 5.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 74.7.227.21 - - [06/May/2026:00:09:24 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.241.131 - - [06/May/2026:00:09:25 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 136.112.111.153 - - [06/May/2026:02:09:41 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 34.173.1.203 - - [06/May/2026:02:13:50 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 35.243.204.128 - - [06/May/2026:02:40:20 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "-" 78.100.170.217 - - [06/May/2026:12:26:45 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 78.100.170.217 - - [06/May/2026:12:26:48 +0800] "GET /wp-admin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 74.7.241.131 - - [06/May/2026:18:44:30 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.175.183 - - [06/May/2026:20:27:13 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 64.225.79.208 - - [06/May/2026:21:56:52 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 64.225.79.208 - - [06/May/2026:21:56:52 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "http://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 64.225.79.208 - - [06/May/2026:21:56:53 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 64.225.79.208 - - [06/May/2026:21:56:59 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "https://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 35.224.126.7 - - [06/May/2026:22:47:19 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 45.131.195.208 - - [06/May/2026:23:04:31 +0800] "GET /wp-includes/css/buttons.css HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 20.43.20.252 - - [06/May/2026:23:05:52 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:52 +0800] "GET /pwn.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:52 +0800] "GET /l.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:53 +0800] "GET /0x.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:53 +0800] "GET /.info.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:53 +0800] "GET /log.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:53 +0800] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 403 199 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:54 +0800] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:54 +0800] "GET /wp-admin/js/ HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:54 +0800] "GET /wp-includes/120f9.php HTTP/1.1" 403 199 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:55 +0800] "GET /wp-includes/sitemaps/admin.php HTTP/1.1" 403 199 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:55 +0800] "GET /wp-includes/customize/about.php HTTP/1.1" 403 199 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:56 +0800] "GET /wp-links.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:56 +0800] "GET /upload/wp-info.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:56 +0800] "GET /nij.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:56 +0800] "GET /to.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:57 +0800] "GET /wp-admin/css/colour.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:57 +0800] "GET /half.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:57 +0800] "GET /2P.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:57 +0800] "GET /tires.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:57 +0800] "GET /xstelth.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:58 +0800] "GET /chslgui.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:58 +0800] "GET /499.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:58 +0800] "GET /like.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:58 +0800] "GET /gay.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:59 +0800] "GET /gk.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:59 +0800] "GET /white.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:59 +0800] "GET /bdroot.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:59 +0800] "GET /olik.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:05:59 +0800] "GET /h.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:00 +0800] "GET /cong.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:00 +0800] "GET /.well-known/about.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:00 +0800] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 199 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:00 +0800] "GET /xxl.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:01 +0800] "GET /wpxml.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:01 +0800] "GET /bob.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:01 +0800] "GET /spawns.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:01 +0800] "GET /t3s.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:02 +0800] "GET /wp-admin/css/ HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:02 +0800] "GET /x/ HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:02 +0800] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:02 +0800] "GET /configuration.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:02 +0800] "GET /wp-admin/js/ HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:03 +0800] "GET /uwu.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:03 +0800] "GET /uwa.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:03 +0800] "GET /crgio.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:03 +0800] "GET /geforce.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:03 +0800] "GET /wp-load.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:04 +0800] "GET /77.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:04 +0800] "GET /.sghb.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:04 +0800] "GET /zoko.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:04 +0800] "GET /solo1.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:05 +0800] "GET /locales.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:05 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:05 +0800] "GET /pucci.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:05 +0800] "GET /wp-includes/blocks/details/ HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:05 +0800] "GET /.dj/index.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:06 +0800] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:06 +0800] "GET /.tmb/ HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:06 +0800] "GET /one.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:06 +0800] "GET /no20.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:07 +0800] "GET /yasnu.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:07 +0800] "GET //sl.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:07 +0800] "GET /vuln.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:07 +0800] "GET /wp-temp.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:07 +0800] "GET /wp-content/themes/twentytwentyfive/assets/ HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:08 +0800] "GET /wp-includes/blocks/buttons/ HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:08 +0800] "GET /class-bda.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:08 +0800] "GET /bhm.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:08 +0800] "GET /xmu.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:08 +0800] "GET /goat.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:09 +0800] "GET /wp-xme.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:09 +0800] "GET /adminer.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:10 +0800] "GET /ktfow.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:11 +0800] "GET /mode.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:11 +0800] "GET /2468.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:11 +0800] "GET //wp-admin/js/index.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:11 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:12 +0800] "GET /amdin.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:12 +0800] "GET /huya.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:12 +0800] "GET /puc.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:12 +0800] "GET //themes.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:12 +0800] "GET /ewp.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:13 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:13 +0800] "GET /xff.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:13 +0800] "GET /lupo.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:13 +0800] "GET /awa.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:13 +0800] "GET /popo.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:14 +0800] "GET /13.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:14 +0800] "GET /tews.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:14 +0800] "GET /moshou.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:14 +0800] "GET /11.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:15 +0800] "GET /p.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:15 +0800] "GET //wp-includes/Requests/ HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:15 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:15 +0800] "GET //shell.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:15 +0800] "GET /seo.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:16 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:16 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:16 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:16 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:16 +0800] "GET /3.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:17 +0800] "GET /4.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:17 +0800] "GET /5.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:17 +0800] "GET /6.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:17 +0800] "GET /cjfuns.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:18 +0800] "GET /class.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:19 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:20 +0800] "GET /.well-known/nastar.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:20 +0800] "GET /2026w.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:20 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:20 +0800] "GET /hplfuns.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:21 +0800] "GET /xa.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:21 +0800] "GET //admin.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:21 +0800] "GET /inege.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:21 +0800] "GET /classgoto24.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:21 +0800] "GET /no1.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:22 +0800] "GET /w2025.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:22 +0800] "GET /fvvff.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:22 +0800] "GET //edit.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:22 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:23 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:23 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:23 +0800] "GET //f6.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:23 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:23 +0800] "GET /style.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:24 +0800] "GET //av.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:24 +0800] "GET /wp-admin/css/bolt.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:24 +0800] "GET /wp-act.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:24 +0800] "GET /classwithtostring.php?p= HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:26 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:27 +0800] "GET /sbhu.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:28 +0800] "GET /wp-blog.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:28 +0800] "GET //wp-includes/js/jquery/ HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:28 +0800] "GET //wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:29 +0800] "GET /8xyz.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:29 +0800] "GET //adminfuns.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:29 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:29 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:29 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:30 +0800] "GET //cgi-bin/index.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:30 +0800] "GET /fff.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:30 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:30 +0800] "GET /makeasmtp.php?p= HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:31 +0800] "GET //admin1.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:31 +0800] "GET //wp-includes/css/dist/ HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:31 +0800] "GET /BDKR28WP.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:31 +0800] "GET //wp-includes/l10n/ HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:31 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:32 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:32 +0800] "GET /wp-admin/js/fi.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:32 +0800] "GET /fe5.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:32 +0800] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:33 +0800] "GET /av.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:33 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:33 +0800] "GET //a1.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:33 +0800] "GET /update/f35.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:33 +0800] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 199 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:34 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:34 +0800] "GET //wp-includes/css/index.php?p= HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:34 +0800] "GET /wp-includes/SimplePie/ HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:34 +0800] "GET /bal.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:35 +0800] "GET /in.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:35 +0800] "GET /gssdd.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:35 +0800] "GET //cgi-bin/admin.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:35 +0800] "GET /bs1.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:35 +0800] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:36 +0800] "GET /gettest.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:36 +0800] "GET /file48.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:36 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:36 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:37 +0800] "GET /drykl.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:37 +0800] "GET /xxx.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:37 +0800] "GET /hypo.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:37 +0800] "GET /file18.php HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:37 +0800] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 261 "-" "-" 20.43.20.252 - - [06/May/2026:23:06:38 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "-" 136.115.74.84 - - [06/May/2026:23:19:21 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 104.197.228.16 - - [07/May/2026:00:27:02 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 34.19.64.211 - - [07/May/2026:00:33:26 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 34.123.120.96 - - [07/May/2026:01:11:39 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 205.169.39.18 - - [07/May/2026:02:19:15 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 205.169.39.58 - - [07/May/2026:07:04:46 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 104.154.155.181 - - [07/May/2026:17:52:37 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.154.155.181 - - [07/May/2026:17:52:37 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.154.155.181 - - [07/May/2026:17:52:38 +0800] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.154.155.181 - - [07/May/2026:17:52:38 +0800] "GET /xmlrpc.php?rsd HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.154.155.181 - - [07/May/2026:17:52:38 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.154.155.181 - - [07/May/2026:17:52:38 +0800] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.154.155.181 - - [07/May/2026:17:52:38 +0800] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.154.155.181 - - [07/May/2026:17:52:39 +0800] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.154.155.181 - - [07/May/2026:17:52:39 +0800] "GET /website/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.154.155.181 - - [07/May/2026:17:52:39 +0800] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.154.155.181 - - [07/May/2026:17:52:39 +0800] "GET /news/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.154.155.181 - - [07/May/2026:17:52:39 +0800] "GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.154.155.181 - - [07/May/2026:17:52:40 +0800] "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.154.155.181 - - [07/May/2026:17:52:40 +0800] "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.154.155.181 - - [07/May/2026:17:52:40 +0800] "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.154.155.181 - - [07/May/2026:17:52:40 +0800] "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.154.155.181 - - [07/May/2026:17:52:41 +0800] "GET /media/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.154.155.181 - - [07/May/2026:17:52:42 +0800] "GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.154.155.181 - - [07/May/2026:17:52:42 +0800] "GET /site/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.154.155.181 - - [07/May/2026:17:52:43 +0800] "GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.154.155.181 - - [07/May/2026:17:52:43 +0800] "GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.41.82.126 - - [07/May/2026:19:30:43 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.41.82.126 - - [07/May/2026:19:30:43 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.41.82.126 - - [07/May/2026:19:30:44 +0800] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.41.82.126 - - [07/May/2026:19:30:44 +0800] "GET /xmlrpc.php?rsd HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.41.82.126 - - [07/May/2026:19:30:44 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.41.82.126 - - [07/May/2026:19:30:44 +0800] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.41.82.126 - - [07/May/2026:19:30:45 +0800] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.41.82.126 - - [07/May/2026:19:30:45 +0800] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.41.82.126 - - [07/May/2026:19:30:45 +0800] "GET /website/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.41.82.126 - - [07/May/2026:19:30:45 +0800] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.41.82.126 - - [07/May/2026:19:30:46 +0800] "GET /news/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.41.82.126 - - [07/May/2026:19:30:46 +0800] "GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.41.82.126 - - [07/May/2026:19:30:46 +0800] "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.41.82.126 - - [07/May/2026:19:30:46 +0800] "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.41.82.126 - - [07/May/2026:19:30:47 +0800] "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.41.82.126 - - [07/May/2026:19:30:48 +0800] "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.41.82.126 - - [07/May/2026:19:30:49 +0800] "GET /media/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.41.82.126 - - [07/May/2026:19:30:49 +0800] "GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.41.82.126 - - [07/May/2026:19:30:49 +0800] "GET /site/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.41.82.126 - - [07/May/2026:19:30:51 +0800] "GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.41.82.126 - - [07/May/2026:19:30:51 +0800] "GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 74.7.175.183 - - [07/May/2026:22:08:15 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.242.55 - - [07/May/2026:22:08:15 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 35.224.102.0 - - [07/May/2026:22:58:49 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 34.135.150.99 - - [07/May/2026:23:00:10 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 158.173.67.215 - - [07/May/2026:23:18:05 +0800] "GET / HTTP/1.1" 403 261 "-" "-" 74.7.241.20 - - [08/May/2026:00:37:17 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.241.131 - - [08/May/2026:00:37:17 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 141.98.11.120 - - [08/May/2026:02:26:02 +0800] "GET /wp-admin/css/ HTTP/1.1" 403 261 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 4.193.137.131 - - [08/May/2026:03:43:17 +0800] "GET /xleet.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:03:43:17 +0800] "GET /xmrlpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:03:43:17 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:03:43:17 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:03:43:19 +0800] "GET /a.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:03:43:19 +0800] "GET /aa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:03:43:19 +0800] "GET /aaa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:03:43:19 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:03:43:19 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:03:43:19 +0800] "GET /admin/controller/extension/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:03:43:19 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:03:43:19 +0800] "GET /alfa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:03:43:19 +0800] "GET /anonse/lock360.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:03:43:19 +0800] "GET /archive.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:03:43:20 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:03:43:20 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:03:43:20 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:03:43:20 +0800] "GET /config.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:03:43:20 +0800] "GET /cookie.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:03:43:20 +0800] "GET /core.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:03:43:20 +0800] "GET /css/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:03:43:20 +0800] "GET /default.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:03:43:20 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:03:43:20 +0800] "GET /dropdown.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:03:43:20 +0800] "GET /edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:03:43:21 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.246.253.24 - - [08/May/2026:05:08:30 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 4.193.137.131 - - [08/May/2026:07:11:27 +0800] "GET /xleet.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:07:11:27 +0800] "GET /xmrlpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:07:11:27 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:07:11:27 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:07:11:27 +0800] "GET /a.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:07:11:27 +0800] "GET /aa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:07:11:27 +0800] "GET /aaa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:07:11:27 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:07:11:28 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:07:11:28 +0800] "GET /admin/controller/extension/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:07:11:28 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:07:11:28 +0800] "GET /alfa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:07:11:28 +0800] "GET /anonse/lock360.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:07:11:28 +0800] "GET /archive.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:07:11:28 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:07:11:28 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:07:11:28 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:07:11:28 +0800] "GET /config.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:07:11:28 +0800] "GET /cookie.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:07:11:29 +0800] "GET /core.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:07:11:29 +0800] "GET /css/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:07:11:29 +0800] "GET /default.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:07:11:29 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:07:11:29 +0800] "GET /dropdown.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:07:11:29 +0800] "GET /edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.137.131 - - [08/May/2026:07:11:29 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 35.246.61.169 - - [08/May/2026:08:09:26 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Opera/9.80 (Macintosh; Intel Mac OS X 10.4.11; U; en) Presto/2.7.62 Version/11.00" 108.162.226.192 - - [08/May/2026:08:47:47 +0800] "GET /.env HTTP/1.1" 403 199 "https://www.google.com/search?q=www.test.thegreenscapecollective.com.au" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 162.158.106.146 - - [08/May/2026:08:47:47 +0800] "GET /.git/config HTTP/1.1" 403 199 "https://www.google.com/search?q=www.test.thegreenscapecollective.com.au" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 172.68.164.5 - - [08/May/2026:08:49:40 +0800] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.208.56 - - [08/May/2026:08:49:40 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.18.99.205 - - [08/May/2026:12:51:43 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; YandexNews/4.0; +http://yandex.com/bots)" 54.152.193.242 - - [08/May/2026:13:49:40 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:124.0) Gecko/20100101 Firefox/124.0" 54.152.193.242 - - [08/May/2026:14:19:31 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:124.0) Gecko/20100101 Firefox/124.0" 20.63.39.182 - - [08/May/2026:16:38:28 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:28 +0800] "GET /shoha.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:29 +0800] "GET /wp-thi.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:29 +0800] "GET /wp-slss.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:29 +0800] "GET /wp-load.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:29 +0800] "GET /ftde.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:30 +0800] "GET /tires.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:30 +0800] "GET /ff1.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:30 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:31 +0800] "GET /333.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:31 +0800] "GET /ccou.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:32 +0800] "GET /albin.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:32 +0800] "GET /sbhu.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:32 +0800] "GET /xda.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:32 +0800] "GET /yellow.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:33 +0800] "GET /lib.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:33 +0800] "GET /ah25.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:33 +0800] "GET /revealability.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:33 +0800] "GET /file4.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:33 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:34 +0800] "GET /file30.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:35 +0800] "GET /forbidals.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:35 +0800] "GET /wp-firewall.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:36 +0800] "GET /shell20211028.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:36 +0800] "GET /wuasr.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:36 +0800] "GET /1index.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:36 +0800] "GET /png.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:36 +0800] "GET /x.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:38 +0800] "GET /yas.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:38 +0800] "GET /dropdown.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:38 +0800] "GET /wp-access.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:39 +0800] "GET /fun.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:39 +0800] "GET /wp-kd4xalrg7m.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:39 +0800] "GET /explorer/index_.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:39 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:39 +0800] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:40 +0800] "GET /new.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:40 +0800] "GET /aevly.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:40 +0800] "GET /app.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:40 +0800] "GET /txets.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:41 +0800] "GET /file59.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:41 +0800] "GET /lala.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:41 +0800] "GET /wp-at.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:41 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:42 +0800] "GET /sys.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:43 +0800] "GET /lv.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:43 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:43 +0800] "GET /db.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:43 +0800] "GET /z.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:44 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:44 +0800] "GET /ok.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:44 +0800] "GET /samll.php HTTP/1.1" 403 261 "-" "-" 20.63.39.182 - - [08/May/2026:16:38:45 +0800] "GET /edit.php HTTP/1.1" 403 261 "-" "-" 159.223.209.248 - - [08/May/2026:17:13:11 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 159.223.209.248 - - [08/May/2026:17:13:12 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "http://test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 159.223.209.248 - - [08/May/2026:17:13:13 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 159.223.209.248 - - [08/May/2026:17:13:19 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "https://test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 74.7.244.49 - - [08/May/2026:20:02:53 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.227.36 - - [08/May/2026:20:02:54 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 138.246.253.24 - - [08/May/2026:21:45:36 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 194.28.211.48 - - [08/May/2026:22:25:08 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Python/3.11 aiohttp/3.9.5" 74.7.230.62 - - [09/May/2026:01:37:59 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.241.25 - - [09/May/2026:01:38:00 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 13.203.43.89 - - [09/May/2026:01:46:32 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:32 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:32 +0800] "GET /.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:33 +0800] "GET /phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:33 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:33 +0800] "GET /php.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:34 +0800] "GET /i.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:34 +0800] "GET /pi.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:34 +0800] "GET /pinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:34 +0800] "GET /test.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:34 +0800] "GET /phpinfo HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:34 +0800] "GET /p.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:34 +0800] "GET /debug.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:35 +0800] "GET /admin/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:35 +0800] "GET /test/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:35 +0800] "GET /dev/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:35 +0800] "GET /old/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:35 +0800] "GET /tmp/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:35 +0800] "GET /public/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:36 +0800] "GET /info HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:36 +0800] "GET /php-info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:36 +0800] "GET /phpversion.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:36 +0800] "GET /_phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:36 +0800] "GET /old_phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:36 +0800] "GET /server-info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:37 +0800] "GET /server-status.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:37 +0800] "GET /_profiler/phpinfo HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:37 +0800] "GET /_environment HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:37 +0800] "GET /webroot/index.php/_environment HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:37 +0800] "GET /mail/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:37 +0800] "GET /cpanel/phpinfo.php HTTP/1.1" 301 245 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:38 +0800] "GET /hosting/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:39 +0800] "GET /webmail/phpinfo.php HTTP/1.1" 404 549 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:39 +0800] "GET /smtp/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:39 +0800] "GET /phpinfo.php.bak HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:39 +0800] "GET /phpinfo.php.old HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:39 +0800] "GET /phpinfo.php~ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:39 +0800] "GET /info.php.bak HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:40 +0800] "GET /phpinfo.php.save HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:40 +0800] "GET /staging/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:40 +0800] "GET /beta/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:40 +0800] "GET /uat/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:40 +0800] "GET /qa/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:40 +0800] "GET /preview/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:40 +0800] "GET /www/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:42 +0800] "GET /htdocs/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:42 +0800] "GET /public_html/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:42 +0800] "GET /site/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:42 +0800] "GET /docs/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:43 +0800] "GET /wp-admin/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:43 +0800] "GET /administrator/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:43 +0800] "GET /core/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.203.43.89 - - [09/May/2026:01:46:43 +0800] "GET /includes/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:22 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:23 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:23 +0800] "GET /.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:24 +0800] "GET /phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:24 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:24 +0800] "GET /php.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:24 +0800] "GET /i.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:24 +0800] "GET /pi.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:24 +0800] "GET /pinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:25 +0800] "GET /test.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:25 +0800] "GET /phpinfo HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:25 +0800] "GET /p.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:25 +0800] "GET /debug.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:25 +0800] "GET /admin/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:25 +0800] "GET /test/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:26 +0800] "GET /dev/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:26 +0800] "GET /old/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:26 +0800] "GET /tmp/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:26 +0800] "GET /public/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:26 +0800] "GET /info HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:26 +0800] "GET /php-info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:26 +0800] "GET /phpversion.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:27 +0800] "GET /_phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:27 +0800] "GET /old_phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:27 +0800] "GET /server-info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:27 +0800] "GET /server-status.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:27 +0800] "GET /_profiler/phpinfo HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:29 +0800] "GET /_environment HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:29 +0800] "GET /webroot/index.php/_environment HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:29 +0800] "GET /mail/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:29 +0800] "GET /cpanel/phpinfo.php HTTP/1.1" 301 245 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:30 +0800] "GET /hosting/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:31 +0800] "GET /webmail/phpinfo.php HTTP/1.1" 404 549 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:31 +0800] "GET /smtp/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:31 +0800] "GET /phpinfo.php.bak HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:31 +0800] "GET /phpinfo.php.old HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:31 +0800] "GET /phpinfo.php~ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:31 +0800] "GET /info.php.bak HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:32 +0800] "GET /phpinfo.php.save HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:32 +0800] "GET /staging/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:32 +0800] "GET /beta/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:32 +0800] "GET /uat/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:32 +0800] "GET /qa/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:32 +0800] "GET /preview/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:33 +0800] "GET /www/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:33 +0800] "GET /htdocs/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:33 +0800] "GET /public_html/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:33 +0800] "GET /site/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:33 +0800] "GET /docs/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:33 +0800] "GET /wp-admin/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:33 +0800] "GET /administrator/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:34 +0800] "GET /core/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.66.217.33 - - [09/May/2026:02:20:34 +0800] "GET /includes/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:46 +0800] "GET /wk/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:47 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:47 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:47 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:48 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:48 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:48 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:49 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:49 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:49 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:50 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:50 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:50 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:50 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:51 +0800] "GET /wp-admin/user/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:51 +0800] "GET /wp-conf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:51 +0800] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:52 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:52 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:52 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:53 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:53 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:53 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:54 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:54 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:54 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:55 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:55 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:55 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:56 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:56 +0800] "GET /kbfr.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:56 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:57 +0800] "GET /chosen.php?p= HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:57 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:57 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:58 +0800] "GET /wp-includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:58 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:58 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:59 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:59 +0800] "GET /uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:32:59 +0800] "GET /wp-admin/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:33:00 +0800] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:33:01 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:33:01 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:33:03 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:33:03 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:33:04 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:33:04 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:33:04 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:33:05 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:33:05 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.86.59 - - [09/May/2026:06:33:05 +0800] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.151.175.120 - - [09/May/2026:10:19:44 +0800] "GET /wk/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.151.175.120 - - [09/May/2026:10:19:45 +0800] "GET /wk/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.151.175.120 - - [09/May/2026:10:19:46 +0800] "GET /wk/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.151.175.120 - - [09/May/2026:10:19:47 +0800] "GET /wk/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 34.186.62.78 - - [09/May/2026:15:24:10 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.186.62.78 - - [09/May/2026:15:24:10 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.186.62.78 - - [09/May/2026:15:24:10 +0800] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.186.62.78 - - [09/May/2026:15:24:11 +0800] "GET /xmlrpc.php?rsd HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.186.62.78 - - [09/May/2026:15:24:11 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.186.62.78 - - [09/May/2026:15:24:11 +0800] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.186.62.78 - - [09/May/2026:15:24:11 +0800] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.186.62.78 - - [09/May/2026:15:24:12 +0800] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.186.62.78 - - [09/May/2026:15:24:12 +0800] "GET /website/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.186.62.78 - - [09/May/2026:15:24:12 +0800] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.186.62.78 - - [09/May/2026:15:24:12 +0800] "GET /news/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.186.62.78 - - [09/May/2026:15:24:13 +0800] "GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.186.62.78 - - [09/May/2026:15:24:13 +0800] "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.186.62.78 - - [09/May/2026:15:24:13 +0800] "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.186.62.78 - - [09/May/2026:15:24:13 +0800] "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.186.62.78 - - [09/May/2026:15:24:13 +0800] "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.186.62.78 - - [09/May/2026:15:24:14 +0800] "GET /media/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.186.62.78 - - [09/May/2026:15:24:14 +0800] "GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.186.62.78 - - [09/May/2026:15:24:14 +0800] "GET /site/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.186.62.78 - - [09/May/2026:15:24:14 +0800] "GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.186.62.78 - - [09/May/2026:15:24:15 +0800] "GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.130.161.218 - - [09/May/2026:20:31:38 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "mukewang/7.2.0 (iPhone; iOS 12.3.1; Scale/2.00) webview" 85.11.167.118 - - [10/May/2026:02:09:09 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.7.227.36 - - [10/May/2026:21:17:48 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.244.49 - - [10/May/2026:21:17:48 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 23.95.96.140 - - [10/May/2026:22:26:19 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 23.95.96.140 - - [10/May/2026:22:26:25 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 74.7.230.62 - - [11/May/2026:00:29:50 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 34.154.163.2 - - [11/May/2026:01:00:33 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "HTC_Dream Mozilla/5.0 (Linux; U; Android 1.5; en-ca; Build/CUPCAKE) AppleWebKit/528.5 (KHTML, like Gecko) Version/3.1.2 Mobile Safari/525.20.1" 107.172.180.205 - - [11/May/2026:02:45:53 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 107.172.180.205 - - [11/May/2026:02:46:00 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 158.173.67.151 - - [11/May/2026:03:16:18 +0800] "GET / HTTP/1.1" 403 261 "-" "-" 35.203.107.77 - - [11/May/2026:04:05:23 +0800] "GET /actuator/heapdump HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.62 YaBrowser/19.9.0.918 (beta) Yowser/2.5 Safari/537.36" 35.203.107.77 - - [11/May/2026:04:05:23 +0800] "GET /docker-compose.yml HTTP/1.1" 403 261 "-" "Opera/10.61 (J2ME/MIDP; Opera Mini/5.1.21219/19.999; en-US; rv:1.9.3a5) WebKit/534.5 Presto/2.6.30" 35.203.107.77 - - [11/May/2026:04:05:23 +0800] "GET /actuator/env HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 9; ONEPLUS 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36" 35.203.107.77 - - [11/May/2026:04:05:23 +0800] "GET /docker-compose.prod.yml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (MSIE 9.0; Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14931" 35.203.107.77 - - [11/May/2026:04:05:23 +0800] "GET /env HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; U; Android 7.0; en-US; PRA-LX1 Build/HUAWEIPRA-LX1) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.13.0.1207 Mobile Safari/537.36" 35.203.107.77 - - [11/May/2026:04:05:23 +0800] "GET /profiler/phpinfo HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 9; SAMSUNG SM-G960U Build/PPR1.180610.011) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/9.4 Chrome/67.0.3396.87 Mobile Safari/537.36" 35.203.107.77 - - [11/May/2026:04:05:23 +0800] "GET /profiler HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux i686; rv:16.0) Gecko/20100101 Firefox/16.0" 35.203.107.77 - - [11/May/2026:04:05:23 +0800] "GET /heapdump HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.1 (KHTML like Gecko) Maxthon/4.0.0.2000 Chrome/22.0.1229.79 Safari/537.1" 35.203.107.77 - - [11/May/2026:04:05:23 +0800] "GET /actuator/configprops HTTP/1.1" 403 261 "-" "Wget/1.12 (freebsd8.1)" 35.203.107.77 - - [11/May/2026:04:05:23 +0800] "GET /configprops HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 7.0; i1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Mobile Safari/537.36" 34.130.154.93 - - [11/May/2026:04:31:34 +0800] "GET /admin/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux; Android 5.0.2; SAMSUNG SM-T530NU Build/LRX22G) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/3.2 Chrome/38.0.2125.102 Safari/537.36" 34.130.154.93 - - [11/May/2026:04:31:34 +0800] "GET /app/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; NetBSD amd64; rv:16.0) Gecko/20121102 Firefox/16.0" 34.130.154.93 - - [11/May/2026:04:31:34 +0800] "GET /.env.docker HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:25.0) Gecko/20100101 Firefox/25.0" 34.130.154.93 - - [11/May/2026:04:31:34 +0800] "GET /app/.env.local HTTP/1.1" 403 199 "-" "Mozilla/4.0 (PDA; PalmOS/sony/model prmr/Revision:1.1.54 (en)) NetFront/3.0" 34.130.154.93 - - [11/May/2026:04:31:34 +0800] "GET /.env.dev.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux; Android 9; G8341) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 34.130.154.93 - - [11/May/2026:04:31:34 +0800] "GET /.env.dev HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.154 Safari/537.36 OPR/20.0.1387.91" 34.130.154.93 - - [11/May/2026:04:31:34 +0800] "GET /.env.development.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux; Android 9; SAMSUNG SM-G960F Build/PPR1.180610.011) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/8.2 Chrome/63.0.3239.111 Mobile Safari/537.36" 34.130.154.93 - - [11/May/2026:04:31:34 +0800] "GET /api/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.79 Safari/537.36" 34.130.154.93 - - [11/May/2026:04:31:34 +0800] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36" 34.130.154.93 - - [11/May/2026:04:31:34 +0800] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows; U; WinNT4.0; en-US; rv:1.2b) Gecko/20021001 Phoenix/0.2" 35.204.236.181 - - [11/May/2026:04:37:25 +0800] "GET /profiler HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.8 (KHTML, like Gecko) Beamrise/17.2.0.9 Chrome/17.0.939.0 Safari/535.8" 35.204.236.181 - - [11/May/2026:04:37:25 +0800] "GET /profiler/phpinfo HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows Phone 8.1; ARM; Trident/7.0; Touch; rv:11.0; IEMobile/11.0; NOKIA; Lumia 920) like Gecko" 35.204.236.181 - - [11/May/2026:04:37:25 +0800] "GET /actuator/configprops HTTP/1.1" 403 261 "-" "SonyEricssonK550i/R1JD Browser/NetFront/3.3 Profile/MIDP-2.0 Configuration/CLDC-1.1" 35.204.236.181 - - [11/May/2026:04:37:25 +0800] "GET /configprops HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 9; Pixel XL) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 35.204.236.181 - - [11/May/2026:04:37:25 +0800] "GET /docker-compose.yml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36 OPR/54.0.2952.71" 35.204.236.181 - - [11/May/2026:04:37:25 +0800] "GET /actuator/heapdump HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.84 Safari/537.36" 35.204.236.181 - - [11/May/2026:04:37:25 +0800] "GET /env HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36" 35.204.236.181 - - [11/May/2026:04:37:25 +0800] "GET /actuator/env HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36 OPR/60.0.3255.70" 35.204.236.181 - - [11/May/2026:04:37:26 +0800] "GET /heapdump HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 UBrowser/6.2.4098.3 Safari/537.36" 35.204.236.181 - - [11/May/2026:04:37:26 +0800] "GET /docker-compose.prod.yml HTTP/1.1" 403 261 "-" "BlackBerry8320/4.2.2 Profile/MIDP-2.0 Configuration/CLDC-1.1 VendorID/100" 34.130.115.60 - - [11/May/2026:04:51:10 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux; Android 6.0; Lenovo A7000-a Build/MRA58K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Mobile Safari/537.36" 34.32.39.155 - - [11/May/2026:05:36:56 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 94.26.106.111 - - [11/May/2026:06:20:46 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "https://t.co/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 94.26.106.111 - - [11/May/2026:06:20:47 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 94.26.106.111 - - [11/May/2026:06:20:47 +0800] "GET /wp-admin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0" 74.7.244.49 - - [11/May/2026:07:21:05 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.241.25 - - [11/May/2026:11:52:39 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.230.62 - - [11/May/2026:11:52:39 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 205.169.39.43 - - [11/May/2026:17:04:22 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 205.169.39.51 - - [11/May/2026:17:10:38 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 74.7.244.49 - - [11/May/2026:23:08:02 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.230.62 - - [12/May/2026:00:47:16 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 3.253.90.243 - - [12/May/2026:02:33:35 +0800] "GET / HTTP/1.0" 403 261 "-" "Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; +info@netcraft.com)" 63.32.89.21 - - [12/May/2026:02:47:56 +0800] "GET / HTTP/1.0" 403 261 "-" "Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; +info@netcraft.com)" 34.154.140.142 - - [12/May/2026:08:43:45 +0800] "GET /env HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 8.1.0; CPH1823 Build/O11019) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Mobile Safari/537.36" 34.154.140.142 - - [12/May/2026:08:43:45 +0800] "GET /heapdump HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36" 34.154.140.142 - - [12/May/2026:08:43:45 +0800] "GET /actuator/heapdump HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 9; CPH1859) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.143 Mobile Safari/537.36" 34.154.140.142 - - [12/May/2026:08:43:45 +0800] "GET /docker-compose.prod.yml HTTP/1.1" 403 261 "-" "SAMSUNG-SGH-E250/1.0 Profile/MIDP-2.0 Configuration/CLDC-1.1 UP.Browser/6.2.3.3.c.1.101 (GUI) MMP/2.0 (compatible; Googlebot-Mobile/2.1; http://www.google.com/bot.html)" 34.154.140.142 - - [12/May/2026:08:43:45 +0800] "GET /actuator/env HTTP/1.1" 403 261 "-" "BlackBerry8330/4.3.0 Profile/MIDP-2.0 Configuration/CLDC-1.1 VendorID/105" 34.154.140.142 - - [12/May/2026:08:43:45 +0800] "GET /configprops HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.96 Safari/537.36" 34.154.140.142 - - [12/May/2026:08:43:45 +0800] "GET /docker-compose.yml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; Android 8.0.0; moto e5 cruise Build/OCPS27.91-157-12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.91 Mobile Safari/537.36" 34.154.140.142 - - [12/May/2026:08:43:45 +0800] "GET /actuator/configprops HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Linux; U; Android 2.1; en-us; HTC Legend Build/cupcake) AppleWebKit/530.17 (KHTML, like Gecko) Version/4.0 Mobile Safari/530.17" 34.154.140.142 - - [12/May/2026:08:43:45 +0800] "GET /profiler/phpinfo HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.25 Safari/537.36 Core/1.70.3722.400 QQBrowser/10.5.3763.400" 34.154.140.142 - - [12/May/2026:08:43:45 +0800] "GET /profiler HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.21 Safari/537.36 MMS/1.0.2531.0" 44.249.70.30 - - [12/May/2026:13:11:13 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)" 44.249.70.30 - - [12/May/2026:13:11:13 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)" 74.7.241.150 - - [12/May/2026:21:48:12 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 20.48.166.247 - - [13/May/2026:00:18:02 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:03 +0800] "GET /0x.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:03 +0800] "GET /xenon1337.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:03 +0800] "GET /LDEFxj.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:04 +0800] "GET /206.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:04 +0800] "GET /zero.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:04 +0800] "GET /koala.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:04 +0800] "GET /mac.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:05 +0800] "GET /hayuk.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:05 +0800] "GET /0d.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:05 +0800] "GET /wefile.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:05 +0800] "GET /casp3.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:05 +0800] "GET /birlingsless.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:06 +0800] "GET /unvouc.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:06 +0800] "GET /wp-signin.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:06 +0800] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:06 +0800] "GET /wp-admin/js/ HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:07 +0800] "GET /wp-links.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:07 +0800] "GET /upload/wp-info.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:07 +0800] "GET /wp-admin/css/colour.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:07 +0800] "GET /half.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:08 +0800] "GET /2P.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:08 +0800] "GET /tires.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:08 +0800] "GET /aevly.php?p= HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:09 +0800] "GET /wordpress/wp-admin/maint/ HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:09 +0800] "GET /wp-block.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:09 +0800] "GET /like.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:09 +0800] "GET /kj.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:10 +0800] "GET /.well-known/about.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:10 +0800] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 199 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:11 +0800] "GET /wpxml.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:12 +0800] "GET /bob.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:12 +0800] "GET /spawns.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:12 +0800] "GET /t3s.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:13 +0800] "GET /wp-admin/css/ HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:13 +0800] "GET /x/ HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:13 +0800] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:13 +0800] "GET /wp-admin/js/ HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:14 +0800] "GET /uwu.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:14 +0800] "GET /uwa.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:14 +0800] "GET /crgio.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:15 +0800] "GET /geforce.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:15 +0800] "GET /wp-load.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:15 +0800] "GET /3PJcpMFsD8B.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:16 +0800] "GET /.sghb.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:16 +0800] "GET /zoko.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:16 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:16 +0800] "GET /pucci.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:17 +0800] "GET /wp-includes/blocks/details/ HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:17 +0800] "GET /.dj/index.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:17 +0800] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:18 +0800] "GET /.tmb/ HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:18 +0800] "GET /one.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:18 +0800] "GET //sl.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:18 +0800] "GET /wp-temp.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:19 +0800] "GET /wp-includes/blocks/buttons/ HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:19 +0800] "GET /xmu.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:19 +0800] "GET /mode.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:19 +0800] "GET //wp-admin/js/index.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:21 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:22 +0800] "GET /puc.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:22 +0800] "GET //themes.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:22 +0800] "GET /dx.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:22 +0800] "GET /awa.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:22 +0800] "GET /11.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:23 +0800] "GET /p.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:23 +0800] "GET //wp-includes/Requests/ HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:23 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:23 +0800] "GET //shell.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:24 +0800] "GET /seo.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:24 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:24 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:24 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:24 +0800] "GET /class.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:25 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:25 +0800] "GET /2026w.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:25 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:26 +0800] "GET /xa.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:26 +0800] "GET //admin.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:26 +0800] "GET /w2025.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:26 +0800] "GET /fvvff.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:26 +0800] "GET //edit.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:27 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:27 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:27 +0800] "GET //f6.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:27 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:28 +0800] "GET //av.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:28 +0800] "GET /wp-admin/css/bolt.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:28 +0800] "GET /wp-act.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:29 +0800] "GET /classwithtostring.php?p= HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:29 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:30 +0800] "GET /wp-blog.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:30 +0800] "GET //wp-includes/js/jquery/ HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:30 +0800] "GET //wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:30 +0800] "GET //adminfuns.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:31 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:31 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:31 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:31 +0800] "GET //cgi-bin/index.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:32 +0800] "GET //wp-includes/css/dist/ HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:32 +0800] "GET /BDKR28WP.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:32 +0800] "GET //wp-includes/l10n/ HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:32 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:33 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:33 +0800] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:33 +0800] "GET /av.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:33 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:33 +0800] "GET //a1.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:34 +0800] "GET /update/f35.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:34 +0800] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 199 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:36 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:37 +0800] "GET //wp-includes/css/index.php?p= HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:37 +0800] "GET /bal.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:37 +0800] "GET //cgi-bin/admin.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:37 +0800] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:38 +0800] "GET /gettest.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:38 +0800] "GET //wp-content/BypassBest.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:38 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:39 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:39 +0800] "GET /buy.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:39 +0800] "GET /xxx.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:39 +0800] "GET /hypo.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:40 +0800] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:40 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:41 +0800] "GET //wp-includes/block-bindings/ HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:41 +0800] "GET /00.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:41 +0800] "GET /als.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:42 +0800] "GET /pol.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:42 +0800] "GET /ms-amdin.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:42 +0800] "GET /mini-type0.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:42 +0800] "GET /bypasbnget.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:43 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:43 +0800] "GET /file5.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:43 +0800] "GET /fs.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:44 +0800] "GET /4PJcpMFsD8B.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:44 +0800] "GET /file.php? HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:44 +0800] "GET /class.1.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:44 +0800] "GET /wp-gr.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:45 +0800] "GET /cfile.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:45 +0800] "GET /class-wp.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:45 +0800] "GET /ff2.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:45 +0800] "GET /aa2.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:46 +0800] "GET /133.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:46 +0800] "GET /ccou.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:46 +0800] "GET /login8.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:46 +0800] "GET /3586%20b64.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:47 +0800] "GET /18299.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:47 +0800] "GET /nx1.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:47 +0800] "GET /Noname6.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:47 +0800] "GET /tia.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:47 +0800] "GET /coa.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:48 +0800] "GET /dr.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:48 +0800] "GET /let.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:48 +0800] "GET /w12.php HTTP/1.1" 403 261 "-" "-" 20.48.166.247 - - [13/May/2026:00:18:48 +0800] "GET /chati.php HTTP/1.1" 403 261 "-" "-" 74.7.227.39 - - [13/May/2026:00:24:55 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.230.27 - - [13/May/2026:00:24:55 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 141.98.11.120 - - [13/May/2026:03:40:31 +0800] "GET /wp-admin/css/ HTTP/1.1" 403 199 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 62.60.130.228 - - [13/May/2026:05:20:46 +0800] "GET /images/images/cache.php HTTP/1.1" 403 261 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 62.60.130.228 - - [13/May/2026:05:21:04 +0800] "GET /images/images/cache.php HTTP/1.1" 403 261 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 62.60.130.228 - - [13/May/2026:05:53:35 +0800] "GET /images/images/cache.php HTTP/1.1" 403 261 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 62.60.130.228 - - [13/May/2026:05:53:50 +0800] "GET /images/images/cache.php HTTP/1.1" 403 261 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 13.206.188.69 - - [13/May/2026:11:01:37 +0800] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 44.250.151.249 - - [13/May/2026:12:59:17 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)" 44.250.151.249 - - [13/May/2026:12:59:17 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)" 34.1.16.188 - - [13/May/2026:15:39:32 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.1.16.188 - - [13/May/2026:15:39:33 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 35.209.226.60 - - [13/May/2026:15:58:03 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 13.206.188.69 - - [13/May/2026:16:22:14 +0800] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 74.7.230.27 - - [13/May/2026:20:07:58 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 34.71.180.243 - - [14/May/2026:00:04:32 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 34.121.86.121 - - [14/May/2026:00:05:50 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 181.233.125.72 - - [14/May/2026:00:53:39 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 34.42.34.237 - - [14/May/2026:04:36:39 +0800] "POST / HTTP/1.1" 403 261 "https://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 34.42.34.237 - - [14/May/2026:04:36:40 +0800] "POST / HTTP/1.1" 403 261 "https://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 34.42.34.237 - - [14/May/2026:04:36:41 +0800] "POST / HTTP/1.1" 403 261 "https://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 34.42.34.237 - - [14/May/2026:04:36:42 +0800] "POST / HTTP/1.1" 403 261 "https://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.0 Safari/537.36" 34.42.34.237 - - [14/May/2026:04:36:43 +0800] "POST / HTTP/1.1" 403 261 "https://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 34.42.34.237 - - [14/May/2026:04:36:44 +0800] "POST / HTTP/1.1" 403 261 "https://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 34.42.34.237 - - [14/May/2026:04:36:45 +0800] "POST / HTTP/1.1" 403 261 "https://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 34.42.34.237 - - [14/May/2026:04:36:46 +0800] "POST / HTTP/1.1" 403 261 "https://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 34.42.34.237 - - [14/May/2026:04:36:47 +0800] "POST / HTTP/1.0" 403 261 "https://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 74.7.241.9 - - [14/May/2026:10:40:52 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.241.150 - - [14/May/2026:10:40:52 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 138.246.253.24 - - [14/May/2026:16:44:25 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 74.7.230.27 - - [15/May/2026:05:19:06 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.227.39 - - [15/May/2026:05:19:06 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 34.47.42.70 - - [15/May/2026:06:42:39 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Firefox/38.0 Iceweasel/38.2.1" 34.64.250.89 - - [15/May/2026:07:32:41 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1944.0 Safari/537.36" 34.130.192.100 - - [15/May/2026:08:06:44 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.6) Gecko/20040406 Galeon/1.3.15" 34.129.86.101 - - [15/May/2026:08:34:12 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Maxthon/5.0.4.3000 Chrome/47.0.2526.73 Safari/537.36" 74.7.241.150 - - [15/May/2026:11:07:21 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 34.162.25.21 - - [15/May/2026:14:14:19 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 34.80.48.63 - - [15/May/2026:16:53:02 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36" 34.129.123.68 - - [15/May/2026:17:18:49 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/71.0.3578.98 Chrome/71.0.3578.98 Safari/537.36" 74.7.230.27 - - [16/May/2026:01:56:04 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.241.150 - - [16/May/2026:09:09:17 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 52.140.205.168 - - [16/May/2026:10:45:09 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:09 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:09 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:09 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:09 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:09 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:09 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:09 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:10 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:10 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:10 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:10 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:10 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:10 +0800] "GET /wp-admin/user.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:10 +0800] "GET /wp-conf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:10 +0800] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:11 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:11 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:11 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:11 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:11 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:11 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:11 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:11 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:11 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:12 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:12 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:12 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:12 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:12 +0800] "GET /kbfr.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:12 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:12 +0800] "GET /chosen.php?p= HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:12 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:13 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:13 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:13 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:13 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:13 +0800] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:13 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:14 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:14 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:14 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:14 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:14 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:14 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:14 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:14 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.205.168 - - [16/May/2026:10:45:15 +0800] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:54 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:54 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:54 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:54 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:55 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:55 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:55 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:55 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:55 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:55 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:56 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:56 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:56 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:56 +0800] "GET /wp-admin/user.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:56 +0800] "GET /wp-conf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:56 +0800] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:57 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:57 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:57 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:57 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:57 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:57 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:58 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:58 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:58 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:58 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:58 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:59 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:59 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:59 +0800] "GET /kbfr.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:59 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:59 +0800] "GET /chosen.php?p= HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:59 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:16:59 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:17:00 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:17:00 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:17:00 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:17:00 +0800] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:17:01 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:17:01 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:17:01 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:17:01 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:17:03 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:17:03 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:17:03 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:17:03 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:17:04 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.93.124 - - [16/May/2026:14:17:04 +0800] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:47 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:47 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:47 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:47 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:47 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:48 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:48 +0800] "GET /wk/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:48 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:48 +0800] "GET /term.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:48 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:48 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:48 +0800] "GET /alfa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:48 +0800] "GET /edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:49 +0800] "GET /elp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:49 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:49 +0800] "GET /666.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:49 +0800] "GET /wp-admin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:49 +0800] "GET /ws54.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:49 +0800] "GET /deepseek_d.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:49 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:49 +0800] "GET /nw.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:50 +0800] "GET /xleet.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:50 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:50 +0800] "GET /155.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:50 +0800] "GET /96i.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:50 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:50 +0800] "GET /min.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:50 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:50 +0800] "GET /php8.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:50 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:51 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:51 +0800] "GET /wp-content/themes/pridmag/il.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:52 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:52 +0800] "GET /a.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:53 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:53 +0800] "GET /wp-content/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:53 +0800] "GET /vx.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:53 +0800] "GET /admin/controller/extension/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:53 +0800] "GET /wap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:55 +0800] "GET /wp-admin/wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:55 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:55 +0800] "GET /aa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:55 +0800] "GET /wp-mail.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:55 +0800] "GET /bolt.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:55 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:56 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:56 +0800] "GET /x.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:56 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:56 +0800] "GET /aaa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:56 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:56 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:56 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:56 +0800] "GET /edit-tags.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:57 +0800] "GET /u.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:57 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:57 +0800] "GET /h.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:57 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:57 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:57 +0800] "GET /manager.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:57 +0800] "GET /w1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:57 +0800] "GET /wp-includes/fonts/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:58 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:58 +0800] "GET /default.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:58 +0800] "GET /i.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:58 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:58 +0800] "GET /wp-includes/Requests/library/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:59 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:59 +0800] "GET /gecko-new.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:59 +0800] "GET /NewFile.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:59 +0800] "GET /wp-Blogs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:10:59 +0800] "GET /wp-includes/fonts/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:00 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:00 +0800] "GET /cv.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:00 +0800] "GET /wp-admin/js/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:00 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:00 +0800] "GET /ws83.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:00 +0800] "GET /atex1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:00 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:01 +0800] "GET /w.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:01 +0800] "GET /archive.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:01 +0800] "GET /bless.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:01 +0800] "GET /sagax1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:01 +0800] "GET /wpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:01 +0800] "GET /fone1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:01 +0800] "GET /ncx.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:01 +0800] "GET /wp-admin/js/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:02 +0800] "GET /wso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:02 +0800] "GET /zup.php73 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:02 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:02 +0800] "GET /wp-blink.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:02 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:02 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:02 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:02 +0800] "GET /ww5.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:03 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:03 +0800] "GET /wp-admin/classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:03 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:03 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:03 +0800] "GET /p.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.91.23.81 - - [16/May/2026:15:11:03 +0800] "GET /php.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.246.253.24 - - [16/May/2026:22:12:51 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 35.224.43.36 - - [16/May/2026:22:14:02 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "-" 140.245.33.146 - - [16/May/2026:22:52:07 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 140.245.33.146 - - [16/May/2026:22:52:07 +0800] "GET / HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 103.153.183.69 - - [16/May/2026:23:43:50 +0800] "POST // HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 103.153.183.69 - - [16/May/2026:23:43:51 +0800] "POST // HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 93.123.109.163 - - [17/May/2026:01:04:32 +0800] "POST // HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 93.123.109.163 - - [17/May/2026:01:04:32 +0800] "POST // HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 176.65.139.235 - - [17/May/2026:02:57:08 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 74.7.241.9 - - [17/May/2026:06:02:01 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.241.150 - - [17/May/2026:06:02:01 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.227.39 - - [17/May/2026:06:54:56 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.230.27 - - [17/May/2026:06:54:56 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 93.123.109.163 - - [17/May/2026:11:30:49 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 93.123.109.163 - - [17/May/2026:11:30:50 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 92.118.39.29 - - [17/May/2026:11:43:58 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Safari/605.1.15" 20.46.124.83 - - [17/May/2026:13:41:03 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:03 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:04 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:04 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:04 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:04 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:04 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:04 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:04 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:04 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:04 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:05 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:05 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:05 +0800] "GET /wp-admin/user.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:05 +0800] "GET /wp-conf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:05 +0800] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:05 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:05 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:05 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:06 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:06 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:06 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:06 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:06 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:06 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:06 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:06 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:06 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:07 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:07 +0800] "GET /kbfr.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:07 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:07 +0800] "GET /chosen.php?p= HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:07 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:07 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:07 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:07 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:08 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:08 +0800] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:08 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:08 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:08 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:08 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:09 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:09 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:09 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:09 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:09 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.46.124.83 - - [17/May/2026:13:41:09 +0800] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.95.96.140 - - [17/May/2026:19:32:24 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15" 23.95.96.140 - - [17/May/2026:19:32:29 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15" 20.198.80.4 - - [17/May/2026:19:43:41 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:41 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:41 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:41 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:41 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:41 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:42 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:42 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:42 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:42 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:42 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:42 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:43 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:43 +0800] "GET /wp-admin/user.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:43 +0800] "GET /wp-conf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:44 +0800] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:44 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:45 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:45 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:45 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:45 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:45 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:45 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:45 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:46 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:46 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:46 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:46 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:46 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:46 +0800] "GET /kbfr.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:46 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:47 +0800] "GET /chosen.php?p= HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:47 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:47 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:47 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:47 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:47 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:48 +0800] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:48 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:48 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:48 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:49 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:49 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:49 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:49 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:49 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:49 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.80.4 - - [17/May/2026:19:43:49 +0800] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:02 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:02 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:02 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:03 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:03 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:03 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:03 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:03 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:03 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:03 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:03 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:04 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:04 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:04 +0800] "GET /wp-admin/user.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:04 +0800] "GET /wp-conf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:04 +0800] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:04 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:04 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:05 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:05 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:05 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:05 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:05 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:05 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:05 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:05 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:06 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:06 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:06 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:06 +0800] "GET /kbfr.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:06 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:06 +0800] "GET /chosen.php?p= HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:06 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:06 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:07 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:07 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:07 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:07 +0800] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:08 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:09 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:09 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:09 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:09 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:10 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:10 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:10 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:10 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.205.121.126 - - [17/May/2026:20:17:10 +0800] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:51 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:51 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:51 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:51 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:51 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:51 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:52 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:52 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:52 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:52 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:52 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:52 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:52 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:53 +0800] "GET /wp-admin/user.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:53 +0800] "GET /wp-conf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:53 +0800] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:53 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:53 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:53 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:53 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:54 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:54 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:54 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:54 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:54 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:54 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:54 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:55 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:55 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:55 +0800] "GET /kbfr.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:55 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:55 +0800] "GET /chosen.php?p= HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:55 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:55 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:56 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:56 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:56 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:56 +0800] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:57 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:57 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:57 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:57 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:57 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:57 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:57 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:58 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:58 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.219.0.106 - - [17/May/2026:20:20:58 +0800] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 205.169.39.3 - - [17/May/2026:21:47:06 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 205.169.39.46 - - [17/May/2026:21:47:19 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 172.71.148.152 - - [17/May/2026:21:57:54 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 Version/17.0 Mobile Safari/604.1" 136.116.137.229 - - [17/May/2026:23:55:11 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 74.7.241.150 - - [18/May/2026:00:05:46 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 34.69.56.174 - - [18/May/2026:00:05:59 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 23.100.96.92 - - [18/May/2026:04:48:30 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:30 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:30 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:30 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:31 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:31 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:31 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:31 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:31 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:31 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:31 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:31 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:32 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:32 +0800] "GET /wp-admin/user.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:32 +0800] "GET /wp-conf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:32 +0800] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:32 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:32 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:32 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:32 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:33 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:33 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:33 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:33 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:33 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:33 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:33 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:33 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:33 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:34 +0800] "GET /kbfr.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:34 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:34 +0800] "GET /chosen.php?p= HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:34 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:34 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:34 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:34 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:34 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:34 +0800] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:37 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:37 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:37 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:37 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:37 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:37 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:37 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:37 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:39 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.100.96.92 - - [18/May/2026:04:48:39 +0800] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.7.230.27 - - [18/May/2026:06:37:42 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 20.197.177.210 - - [18/May/2026:17:27:12 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:12 +0800] "GET /public/wp-blog.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:12 +0800] "GET /wp-blog.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:13 +0800] "GET /casp1.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:13 +0800] "GET /ws78.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:14 +0800] "GET /koiy.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:14 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:14 +0800] "GET /wp-png.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:15 +0800] "GET /xa.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:15 +0800] "GET /press.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:16 +0800] "GET /ws88.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:16 +0800] "GET /wxfyf.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:16 +0800] "GET /wp-blog-header.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:17 +0800] "GET /sa.php7 HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:17 +0800] "GET /public/ws49.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:17 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:18 +0800] "GET /xxw.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:18 +0800] "GET /amwxl.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:19 +0800] "GET /wp-admin/css/bolt.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:19 +0800] "GET /ws83.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:19 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:20 +0800] "GET /zc-104.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:20 +0800] "GET /grsiuk.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:20 +0800] "GET /wp9.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:21 +0800] "GET /aevly.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:21 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:21 +0800] "GET /5b9ac.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:22 +0800] "GET /tool.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:22 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:23 +0800] "GET /wtiiy.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:23 +0800] "GET /init.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:23 +0800] "GET /wp5.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:24 +0800] "GET /jga.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:24 +0800] "GET /gifclass.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:24 +0800] "GET /ajax.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:25 +0800] "GET /tx78.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:25 +0800] "GET /csv.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:25 +0800] "GET /n3yUmQ6Q9xwQ8ocdefault.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:26 +0800] "GET /ne2026.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:26 +0800] "GET /wp-act.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:27 +0800] "GET /ws86.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:27 +0800] "GET /asd.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:27 +0800] "GET /torsa1.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:28 +0800] "GET /a4.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:28 +0800] "GET /myfile.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:29 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:29 +0800] "GET /cu.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:29 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:30 +0800] "GET /666.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:30 +0800] "GET /saorix1.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:31 +0800] "GET /packsin1.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:31 +0800] "GET /menu.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:31 +0800] "GET /admin-footer.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:32 +0800] "GET /shop.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:32 +0800] "GET /maul.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:33 +0800] "GET /wp-blogs.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:33 +0800] "GET /bjfl.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:33 +0800] "GET /xltt.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:34 +0800] "GET /lowpr.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:34 +0800] "GET /term.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:34 +0800] "GET /fs.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:35 +0800] "GET /ortasekerli1.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:35 +0800] "GET /ws80.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:35 +0800] "GET /gk.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:36 +0800] "GET /varb.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:36 +0800] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:37 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:37 +0800] "GET /uuu.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:37 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:38 +0800] "GET /cilus.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:38 +0800] "GET /edit.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:39 +0800] "GET /ws60.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:39 +0800] "GET /rzki.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:39 +0800] "GET /jp.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:40 +0800] "GET /G-In.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:40 +0800] "GET /public/file.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:40 +0800] "GET /bolt.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:41 +0800] "GET /dass.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:41 +0800] "GET /ws85.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:41 +0800] "GET /buc.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:42 +0800] "GET /gptsh.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:42 +0800] "GET /wmore1.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:43 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:43 +0800] "GET //nw.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:43 +0800] "GET /155.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:44 +0800] "GET /hots.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:44 +0800] "GET /install.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:44 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:45 +0800] "GET /users.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:45 +0800] "GET /wp-p2r3q9c8k4.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:46 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:46 +0800] "GET /ox.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:46 +0800] "GET /sid3.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:47 +0800] "GET /drhunthq.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:47 +0800] "GET /s.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:47 +0800] "GET /clss.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:48 +0800] "GET /mh.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:48 +0800] "GET /wen.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:48 +0800] "GET /Sanskrit.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:49 +0800] "GET /gettest.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:49 +0800] "GET /bfil.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:50 +0800] "GET /ww.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:50 +0800] "GET /byypas.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:51 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:51 +0800] "GET /ws87.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:51 +0800] "GET /aa21.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:52 +0800] "GET /okxh.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:52 +0800] "GET /6kDPjgFTmvS.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:53 +0800] "GET /fsjzs.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:53 +0800] "GET /sale.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:53 +0800] "GET /t00l.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:54 +0800] "GET /wziar1.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:54 +0800] "GET /lib.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:55 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:55 +0800] "GET /kj.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:55 +0800] "GET /amp.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:56 +0800] "GET /bo.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:56 +0800] "GET /zc-243.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:56 +0800] "GET /ws81.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:57 +0800] "GET /callback.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:57 +0800] "GET /sd.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:58 +0800] "GET /gpt-sh.php HTTP/1.1" 403 261 "-" "-" 20.197.177.210 - - [18/May/2026:17:27:58 +0800] "GET /domains.php HTTP/1.1" 403 261 "-" "-" 34.24.171.246 - - [18/May/2026:23:33:45 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.24.171.246 - - [18/May/2026:23:33:45 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.24.171.246 - - [18/May/2026:23:33:45 +0800] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.24.171.246 - - [18/May/2026:23:33:45 +0800] "GET /xmlrpc.php?rsd HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.24.171.246 - - [18/May/2026:23:33:46 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.24.171.246 - - [18/May/2026:23:33:47 +0800] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.24.171.246 - - [18/May/2026:23:33:47 +0800] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.24.171.246 - - [18/May/2026:23:33:48 +0800] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.24.171.246 - - [18/May/2026:23:33:48 +0800] "GET /website/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.24.171.246 - - [18/May/2026:23:33:48 +0800] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.24.171.246 - - [18/May/2026:23:33:49 +0800] "GET /news/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.24.171.246 - - [18/May/2026:23:33:49 +0800] "GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.24.171.246 - - [18/May/2026:23:33:49 +0800] "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.24.171.246 - - [18/May/2026:23:33:49 +0800] "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.24.171.246 - - [18/May/2026:23:33:50 +0800] "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.24.171.246 - - [18/May/2026:23:33:50 +0800] "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.24.171.246 - - [18/May/2026:23:33:50 +0800] "GET /media/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.24.171.246 - - [18/May/2026:23:33:50 +0800] "GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.24.171.246 - - [18/May/2026:23:33:51 +0800] "GET /site/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.24.171.246 - - [18/May/2026:23:33:51 +0800] "GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.24.171.246 - - [18/May/2026:23:33:51 +0800] "GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:55 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:56 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:56 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:56 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:56 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:56 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:56 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:56 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:56 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:56 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:57 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:57 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:57 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:57 +0800] "GET /wp-admin/user.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:57 +0800] "GET /wp-conf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:57 +0800] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:57 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:57 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:58 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:58 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:58 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:58 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:58 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:58 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:58 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:58 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:58 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:59 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:59 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:59 +0800] "GET /kbfr.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:59 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:59 +0800] "GET /chosen.php?p= HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:59 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:59 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:59 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:49:59 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:50:00 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:50:00 +0800] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:50:00 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:50:00 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:50:00 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:50:01 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:50:01 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:50:01 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:50:01 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:50:01 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:50:01 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:00:50:01 +0800] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:30 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:30 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:30 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:30 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:30 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:31 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:31 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:31 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:31 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:31 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:31 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:31 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:31 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:32 +0800] "GET /wp-admin/user.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:32 +0800] "GET /wp-conf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:32 +0800] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:32 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:32 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:32 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:32 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:32 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:32 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:33 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:33 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:33 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:33 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:33 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:33 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:33 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:33 +0800] "GET /kbfr.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:34 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:34 +0800] "GET /chosen.php?p= HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:34 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:34 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:34 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:34 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:34 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:34 +0800] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:35 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:35 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:35 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:35 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:35 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:35 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:35 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:36 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:36 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.89.16.61 - - [19/May/2026:04:25:36 +0800] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:21 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:23 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:23 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:23 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:24 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:24 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:24 +0800] "GET /wk/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:25 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:25 +0800] "GET /term.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:26 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:26 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:26 +0800] "GET /alfa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:27 +0800] "GET /edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:27 +0800] "GET /elp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:28 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:28 +0800] "GET /666.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:30 +0800] "GET /wp-admin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:30 +0800] "GET /ws54.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:30 +0800] "GET /deepseek_d.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:31 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:31 +0800] "GET /nw.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:32 +0800] "GET /xleet.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:32 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:32 +0800] "GET /155.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:32 +0800] "GET /96i.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:33 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:33 +0800] "GET /min.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:34 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:34 +0800] "GET /php8.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:34 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:35 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:35 +0800] "GET /wp-content/themes/pridmag/il.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:35 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:36 +0800] "GET /a.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:36 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:37 +0800] "GET /wp-content/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:37 +0800] "GET /vx.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:38 +0800] "GET /admin/controller/extension/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:38 +0800] "GET /wap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:38 +0800] "GET /wp-admin/wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:38 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:39 +0800] "GET /aa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:39 +0800] "GET /wp-mail.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:40 +0800] "GET /bolt.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:40 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:40 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:41 +0800] "GET /x.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:41 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:43 +0800] "GET /aaa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:43 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:43 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:44 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:44 +0800] "GET /edit-tags.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:44 +0800] "GET /u.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:45 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:45 +0800] "GET /h.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:45 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:46 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:46 +0800] "GET /manager.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:46 +0800] "GET /w1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:47 +0800] "GET /wp-includes/fonts/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:47 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:47 +0800] "GET /default.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:48 +0800] "GET /i.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:48 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:48 +0800] "GET /wp-includes/Requests/library/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:51 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:51 +0800] "GET /gecko-new.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:52 +0800] "GET /NewFile.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:52 +0800] "GET /wp-Blogs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:52 +0800] "GET /wp-includes/fonts/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:55 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:55 +0800] "GET /cv.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:56 +0800] "GET /wp-admin/js/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:56 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:57 +0800] "GET /ws83.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:57 +0800] "GET /atex1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:57 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:57 +0800] "GET /w.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:58 +0800] "GET /archive.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:58 +0800] "GET /bless.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:58 +0800] "GET /sagax1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:59 +0800] "GET /wpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:59 +0800] "GET /fone1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:37:59 +0800] "GET /ncx.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:38:00 +0800] "GET /wp-admin/js/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:38:00 +0800] "GET /wso.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:38:01 +0800] "GET /zup.php73 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:38:01 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:38:01 +0800] "GET /wp-blink.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:38:02 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:38:02 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:38:02 +0800] "GET /wp-content/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:38:03 +0800] "GET /ww5.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:38:03 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:38:03 +0800] "GET /wp-admin/classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:38:04 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:38:04 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:38:04 +0800] "GET /p.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.80.131 - - [19/May/2026:09:38:05 +0800] "GET /php.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.95.96.140 - - [19/May/2026:12:36:32 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.1) AppleWebKit/618.27 (KHTML, like Gecko) Version/17.4 Safari/618.27" 23.95.96.140 - - [19/May/2026:12:36:40 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.1) AppleWebKit/618.27 (KHTML, like Gecko) Version/17.4 Safari/618.27" 20.198.90.170 - - [20/May/2026:03:23:38 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:38 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:38 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:38 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:38 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:38 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:38 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:39 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:39 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:39 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:39 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:39 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:39 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:39 +0800] "GET /wp-admin/user.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:40 +0800] "GET /wp-conf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:40 +0800] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:40 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:40 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:40 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:40 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:41 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:41 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:41 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:41 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:41 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:41 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:41 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:41 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:42 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:42 +0800] "GET /kbfr.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:42 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:42 +0800] "GET /chosen.php?p= HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:42 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:42 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:42 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:43 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:43 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:43 +0800] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:43 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:44 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:44 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:44 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:44 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:44 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:44 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:44 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:45 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.198.90.170 - - [20/May/2026:03:23:45 +0800] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.184.99.50 - - [20/May/2026:03:27:39 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.184.99.50 - - [20/May/2026:03:27:40 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.184.99.50 - - [20/May/2026:03:27:40 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.184.99.50 - - [20/May/2026:03:27:40 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.184.99.50 - - [20/May/2026:03:27:40 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.184.99.50 - - [20/May/2026:03:27:40 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.184.99.50 - - [20/May/2026:03:27:40 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.184.99.50 - - [20/May/2026:03:27:40 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.184.99.50 - - [20/May/2026:03:27:40 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.184.99.50 - - [20/May/2026:03:27:41 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.184.99.50 - - [20/May/2026:03:27:41 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.184.99.50 - - [20/May/2026:03:27:41 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.184.99.50 - - [20/May/2026:03:27:41 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.184.99.50 - - [20/May/2026:03:27:43 +0800] "GET /wp-admin/user.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.184.99.50 - - [20/May/2026:03:27:43 +0800] "GET /wp-conf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.184.99.50 - - [20/May/2026:03:27:43 +0800] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.7.227.39 - - [20/May/2026:05:17:12 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.230.27 - - [20/May/2026:05:17:12 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 13.78.11.188 - - [20/May/2026:07:03:57 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:03:57 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:03:58 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:03:58 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:03:58 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:03:58 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:03:59 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:03:59 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:03:59 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:03:59 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:00 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:00 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:00 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:00 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:00 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:01 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:01 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:01 +0800] "GET /index.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:01 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:01 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:02 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:02 +0800] "GET /randkeyword.php7 HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:02 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:02 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:02 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:03 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:03 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:03 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:03 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:04 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:04 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:04 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:04 +0800] "GET /wp-includes/phpmailer/ HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:04 +0800] "GET /wp-includes/requests/src/response/about.php HTTP/1.1" 403 199 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:05 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:05 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:05 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:05 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:05 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:05 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:05 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:05 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:06 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:06 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:06 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:07 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:07 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:07 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:08 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:08 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:09 +0800] "GET /wp-admin/user.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:09 +0800] "GET /wp-conf.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:10 +0800] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:10 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:10 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:10 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:10 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:11 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:11 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:11 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:12 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:13 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:13 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:14 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:14 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:14 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:14 +0800] "GET /kbfr.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:14 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:15 +0800] "GET /chosen.php?p= HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:15 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:15 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:15 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:15 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:16 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:16 +0800] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 403 199 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:16 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:17 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:17 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:18 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:18 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:18 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:18 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:18 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:19 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "-" 13.78.11.188 - - [20/May/2026:07:04:19 +0800] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 403 261 "-" "-" 20.220.236.34 - - [20/May/2026:07:04:27 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:27 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:27 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:27 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:28 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:28 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:28 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:28 +0800] "GET /wp-content/plugins/twenty/login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:29 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:29 +0800] "GET /file3.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:29 +0800] "GET /wp-mail.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:29 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:29 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:30 +0800] "GET /.dj/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:30 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:30 +0800] "GET /php8.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:30 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:31 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:31 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:31 +0800] "GET /011i.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:31 +0800] "GET /edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:32 +0800] "GET /sid3.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:32 +0800] "GET /load.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:32 +0800] "GET /166.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:32 +0800] "GET /wp-mail.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:32 +0800] "GET /leaf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:33 +0800] "GET /grsiuk.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:33 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:33 +0800] "GET /fs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:33 +0800] "GET /ws38.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:34 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:34 +0800] "GET /classsmtps.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:34 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:34 +0800] "GET /CDX1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:35 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:35 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:35 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:35 +0800] "GET /css.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:36 +0800] "GET /php.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:36 +0800] "GET /wp-Blogs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:36 +0800] "GET /wp-content/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:36 +0800] "GET /wp-content/plugins/beteng88/ws83.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:36 +0800] "GET /ws83.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:37 +0800] "GET /file61.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:37 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:37 +0800] "GET /y.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:37 +0800] "GET /akcc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:38 +0800] "GET /wp-admin/user/12.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:38 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:38 +0800] "GET /term.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:38 +0800] "GET /666.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:39 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:39 +0800] "GET /wp-config-sample.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:39 +0800] "GET /log.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:39 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:39 +0800] "GET /aa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:40 +0800] "GET /bolt.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:40 +0800] "GET /x.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:40 +0800] "GET /jga.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:40 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:41 +0800] "GET /vx.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:41 +0800] "GET /ws77.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:41 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:41 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:42 +0800] "GET /wp-content/plugins/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:42 +0800] "GET /asd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:42 +0800] "GET /default.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:42 +0800] "GET /gettest.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:42 +0800] "GET /install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:43 +0800] "GET /tfm.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:43 +0800] "GET /ws81.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:43 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:43 +0800] "GET /t.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:44 +0800] "GET /wp-admin/maint/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:44 +0800] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:44 +0800] "GET /a.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:44 +0800] "GET /a1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:45 +0800] "GET /onclickfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:45 +0800] "GET /w.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:45 +0800] "GET /wp-admin/maint/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:45 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:46 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:46 +0800] "GET /.info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:46 +0800] "GET /config.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:46 +0800] "GET /item.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:47 +0800] "GET /m.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.236.34 - - [20/May/2026:07:04:47 +0800] "GET /rh.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.7.241.9 - - [20/May/2026:09:27:43 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.241.150 - - [20/May/2026:09:27:43 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 145.220.91.19 - - [20/May/2026:10:59:19 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 74.7.230.27 - - [20/May/2026:13:08:24 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 209.97.132.118 - - [20/May/2026:17:04:03 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 209.97.132.118 - - [20/May/2026:17:04:04 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "http://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 209.97.132.118 - - [20/May/2026:17:04:05 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 209.97.132.118 - - [20/May/2026:17:04:11 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "https://www.test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 74.7.241.150 - - [20/May/2026:17:39:09 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 35.237.140.216 - - [20/May/2026:18:41:09 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.237.140.216 - - [20/May/2026:18:41:09 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.237.140.216 - - [20/May/2026:18:41:09 +0800] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.237.140.216 - - [20/May/2026:18:41:10 +0800] "GET /xmlrpc.php?rsd HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.237.140.216 - - [20/May/2026:18:41:10 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.237.140.216 - - [20/May/2026:18:41:10 +0800] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.237.140.216 - - [20/May/2026:18:41:10 +0800] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.237.140.216 - - [20/May/2026:18:41:11 +0800] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.237.140.216 - - [20/May/2026:18:41:11 +0800] "GET /website/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.237.140.216 - - [20/May/2026:18:41:11 +0800] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.237.140.216 - - [20/May/2026:18:41:11 +0800] "GET /news/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.237.140.216 - - [20/May/2026:18:41:12 +0800] "GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.237.140.216 - - [20/May/2026:18:41:12 +0800] "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.237.140.216 - - [20/May/2026:18:41:12 +0800] "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.237.140.216 - - [20/May/2026:18:41:12 +0800] "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.237.140.216 - - [20/May/2026:18:41:12 +0800] "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.237.140.216 - - [20/May/2026:18:41:13 +0800] "GET /media/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.237.140.216 - - [20/May/2026:18:41:13 +0800] "GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.237.140.216 - - [20/May/2026:18:41:13 +0800] "GET /site/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.237.140.216 - - [20/May/2026:18:41:13 +0800] "GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.237.140.216 - - [20/May/2026:18:41:14 +0800] "GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.61.48.200 - - [21/May/2026:01:22:15 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 34.60.91.34 - - [21/May/2026:01:50:25 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 192.241.162.224 - - [21/May/2026:03:17:46 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 192.241.162.224 - - [21/May/2026:03:17:46 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 192.241.162.224 - - [21/May/2026:03:17:47 +0800] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 192.241.162.224 - - [21/May/2026:03:17:47 +0800] "GET /xmlrpc.php?rsd HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 192.241.162.224 - - [21/May/2026:03:17:47 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 192.241.162.224 - - [21/May/2026:03:17:47 +0800] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 192.241.162.224 - - [21/May/2026:03:17:47 +0800] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 192.241.162.224 - - [21/May/2026:03:17:48 +0800] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 192.241.162.224 - - [21/May/2026:03:17:48 +0800] "GET /website/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 192.241.162.224 - - [21/May/2026:03:17:48 +0800] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 192.241.162.224 - - [21/May/2026:03:17:48 +0800] "GET /news/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 192.241.162.224 - - [21/May/2026:03:17:49 +0800] "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 192.241.162.224 - - [21/May/2026:03:17:49 +0800] "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 192.241.162.224 - - [21/May/2026:03:17:49 +0800] "GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 192.241.162.224 - - [21/May/2026:03:17:49 +0800] "GET /site/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 192.241.162.224 - - [21/May/2026:03:17:49 +0800] "GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 192.241.162.224 - - [21/May/2026:03:17:50 +0800] "GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 104.154.89.74 - - [21/May/2026:03:52:57 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 4.193.141.117 - - [21/May/2026:04:15:37 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:37 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:37 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:37 +0800] "GET /10.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:37 +0800] "GET /13.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:37 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:37 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:37 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:37 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:38 +0800] "GET /al.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:38 +0800] "GET /alfa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:38 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:38 +0800] "GET /aa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:38 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:38 +0800] "GET /av.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:38 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:38 +0800] "GET /asus.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:38 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:38 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:38 +0800] "GET /alfa-rex.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:39 +0800] "GET /b.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:39 +0800] "GET /buy.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:39 +0800] "GET /bless.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:39 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:39 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:39 +0800] "GET /content.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:39 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:39 +0800] "GET /css.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:39 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:39 +0800] "GET /doc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:39 +0800] "GET /elp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:40 +0800] "GET /Exception-class.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:40 +0800] "GET /ee.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:40 +0800] "GET /edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:40 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:40 +0800] "GET /fff.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:40 +0800] "GET /ff1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:42 +0800] "GET /flower.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:42 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:42 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:42 +0800] "GET /g.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:42 +0800] "GET /hplfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:42 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:42 +0800] "GET /in.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:42 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:42 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:42 +0800] "GET /item.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:43 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:43 +0800] "GET /license.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:43 +0800] "GET /load.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:43 +0800] "GET /manager.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:43 +0800] "GET /media.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:43 +0800] "GET /mar.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:43 +0800] "GET /my1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:43 +0800] "GET /mm.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:43 +0800] "GET /network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:43 +0800] "GET /new.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:43 +0800] "GET /0x.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:44 +0800] "GET /0.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:44 +0800] "GET /oxshell.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:44 +0800] "GET /php8.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:44 +0800] "GET /p.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:44 +0800] "GET /php.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:44 +0800] "GET /past.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:44 +0800] "GET /root.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:44 +0800] "GET /r.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:44 +0800] "GET /sid3.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:44 +0800] "GET /ss.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:44 +0800] "GET /sts.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:45 +0800] "GET /shell.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:45 +0800] "GET /setup-config.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:45 +0800] "GET /t.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:45 +0800] "GET /up.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:45 +0800] "GET /ultra.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:45 +0800] "GET /vv.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:45 +0800] "GET /V5.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:45 +0800] "GET /wp-user.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:45 +0800] "GET /wp-blog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:45 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:46 +0800] "GET /worksec.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:46 +0800] "GET /wp-themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:46 +0800] "GET /wp-signin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:46 +0800] "GET /wp-blog-header.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:46 +0800] "GET /wp-links-opml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:46 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:46 +0800] "GET /wsa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:46 +0800] "GET /w.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:46 +0800] "GET /x.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:46 +0800] "GET /xx.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:47 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.193.141.117 - - [21/May/2026:04:15:47 +0800] "GET /y.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 35.254.49.88 - - [21/May/2026:04:26:08 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 74.7.230.27 - - [21/May/2026:12:57:49 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 18.230.59.26 - - [21/May/2026:16:39:08 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:08 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:09 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:09 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:09 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:11 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:11 +0800] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:13 +0800] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:14 +0800] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:16 +0800] "GET /.env.staging HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:17 +0800] "GET /.env.development HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:18 +0800] "GET /.env.test HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:20 +0800] "GET /.env.remote HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:21 +0800] "GET /.env.bak HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:23 +0800] "GET /.env.backup HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:24 +0800] "GET /.env.save HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:26 +0800] "GET /.env.old HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:27 +0800] "GET /.env.sample HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:29 +0800] "GET /.env.example HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:30 +0800] "GET /.env.dev HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:31 +0800] "GET /.env.prod HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:33 +0800] "GET /.env.stage HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:34 +0800] "GET /.env.ci HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:36 +0800] "GET /.env.docker HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:37 +0800] "GET /.env.live HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:39 +0800] "GET /.env.preprod HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:40 +0800] "GET /.env.uat HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:42 +0800] "GET /.env.dist HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:43 +0800] "GET /.env.swp HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:45 +0800] "GET /.env~ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:46 +0800] "GET /.env1 HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:47 +0800] "GET /.env2 HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:49 +0800] "GET /.env_copy HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:50 +0800] "GET /.env.txt HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:52 +0800] "GET /.env.json HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:53 +0800] "GET /.env.yaml HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:55 +0800] "GET /.env.yml HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:56 +0800] "GET /app/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:58 +0800] "GET /apps/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 18.230.59.26 - - [21/May/2026:16:39:59 +0800] "GET /api/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 74.7.241.150 - - [21/May/2026:19:39:11 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 72.14.147.205 - - [21/May/2026:20:47:20 +0800] "HEAD / HTTP/1.1" 403 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 72.14.147.205 - - [21/May/2026:20:47:21 +0800] "HEAD / HTTP/1.1" 403 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:149.0) Gecko/20100101 Firefox/149.0" 72.14.147.205 - - [21/May/2026:20:47:22 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 72.14.147.205 - - [21/May/2026:20:47:22 +0800] "GET /.git/HEAD HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" 72.14.147.205 - - [21/May/2026:20:47:23 +0800] "GET /env HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" 72.14.147.205 - - [21/May/2026:20:47:23 +0800] "GET /config.json HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" 72.14.147.205 - - [21/May/2026:20:47:23 +0800] "GET /api/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 72.14.147.205 - - [21/May/2026:20:47:23 +0800] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 72.14.147.205 - - [21/May/2026:20:47:23 +0800] "GET /.env.development HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 72.14.147.205 - - [21/May/2026:20:47:23 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 72.14.147.205 - - [21/May/2026:20:47:23 +0800] "GET /backend/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 72.14.147.205 - - [21/May/2026:20:47:23 +0800] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 72.14.147.205 - - [21/May/2026:20:47:23 +0800] "GET /js/config.js HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 72.14.147.205 - - [21/May/2026:20:47:23 +0800] "GET /.aws/credentials HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 72.14.147.205 - - [21/May/2026:20:47:24 +0800] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" 34.29.15.222 - - [21/May/2026:22:00:41 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 34.172.118.115 - - [21/May/2026:22:12:03 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 88.151.33.237 - - [21/May/2026:22:41:43 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 88.151.33.237 - - [21/May/2026:23:18:49 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 88.151.33.237 - - [21/May/2026:23:18:49 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 34.26.3.236 - - [21/May/2026:23:19:28 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 74.7.230.27 - - [21/May/2026:23:27:14 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 35.195.194.97 - - [21/May/2026:23:45:56 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 152.42.206.230 - - [22/May/2026:02:49:50 +0800] "GET /wp-admin/install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:29 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:29 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:29 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:29 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:29 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:30 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:30 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:30 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:30 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:30 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:30 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:30 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:30 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:30 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:31 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:31 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:31 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:31 +0800] "GET /index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:31 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:31 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:31 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:31 +0800] "GET /randkeyword.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:32 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:32 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:32 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:32 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:32 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:32 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:32 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:32 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:32 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:33 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:33 +0800] "GET /wp-includes/phpmailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:33 +0800] "GET /wp-includes/requests/src/response/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:33 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:33 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:34 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:34 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:34 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:34 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:34 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:34 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:34 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:35 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:35 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:35 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:35 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:35 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:35 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:35 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:35 +0800] "GET /wp-admin/user.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:35 +0800] "GET /wp-conf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:36 +0800] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:36 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:36 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:36 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:36 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:36 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:36 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:36 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:37 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:37 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:37 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:38 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:38 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:38 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:38 +0800] "GET /kbfr.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:38 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:38 +0800] "GET /chosen.php?p= HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:38 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:38 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:38 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:39 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:39 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:39 +0800] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:39 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:39 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:40 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:40 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:40 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:40 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:40 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:40 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:40 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:06:18:40 +0800] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 34.1.24.108 - - [22/May/2026:07:27:55 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.1.24.108 - - [22/May/2026:07:27:56 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 35.208.141.188 - - [22/May/2026:08:00:54 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:38 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:38 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:38 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:38 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:39 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:39 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:39 +0800] "GET /bgymj.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:39 +0800] "GET /wp-content/plugins/twenty/login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:39 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:40 +0800] "GET /file3.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:40 +0800] "GET /wp-mail.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:40 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:40 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:40 +0800] "GET /.dj/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:41 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:41 +0800] "GET /php8.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:41 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:41 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:42 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:42 +0800] "GET /011i.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:42 +0800] "GET /edit.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:42 +0800] "GET /sid3.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:42 +0800] "GET /load.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:43 +0800] "GET /166.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:43 +0800] "GET /wp-mail.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:43 +0800] "GET /leaf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:43 +0800] "GET /grsiuk.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:43 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:44 +0800] "GET /fs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:44 +0800] "GET /ws38.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:44 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:45 +0800] "GET /classsmtps.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:45 +0800] "GET /amax.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:45 +0800] "GET /CDX1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:45 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:45 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:46 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:46 +0800] "GET /css.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:46 +0800] "GET /php.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:46 +0800] "GET /wp-Blogs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:46 +0800] "GET /wp-content/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:47 +0800] "GET /wp-content/plugins/beteng88/ws83.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:47 +0800] "GET /ws83.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:47 +0800] "GET /file61.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:47 +0800] "GET /sadcut1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:48 +0800] "GET /y.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:48 +0800] "GET /akcc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:48 +0800] "GET /wp-admin/user/12.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:48 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:48 +0800] "GET /term.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:49 +0800] "GET /666.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:49 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:49 +0800] "GET /wp-config-sample.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:49 +0800] "GET /log.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:49 +0800] "GET /a5.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:50 +0800] "GET /aa.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:50 +0800] "GET /bolt.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:50 +0800] "GET /x.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:50 +0800] "GET /jga.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:50 +0800] "GET /k.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:51 +0800] "GET /vx.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:51 +0800] "GET /ws77.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:51 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:51 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:51 +0800] "GET /wp-content/plugins/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:52 +0800] "GET /asd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:52 +0800] "GET /default.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:52 +0800] "GET /gettest.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:53 +0800] "GET /install.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:53 +0800] "GET /tfm.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:53 +0800] "GET /ws81.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:53 +0800] "GET /222.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:53 +0800] "GET /t.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:54 +0800] "GET /wp-admin/maint/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:54 +0800] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:54 +0800] "GET /a.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:54 +0800] "GET /a1.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:54 +0800] "GET /onclickfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:55 +0800] "GET /w.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:55 +0800] "GET /wp-admin/maint/about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:55 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:55 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:56 +0800] "GET /.info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:56 +0800] "GET /config.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:56 +0800] "GET /item.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:56 +0800] "GET /m.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.242.199.195 - - [22/May/2026:09:43:56 +0800] "GET /rh.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.7.241.2 - - [22/May/2026:12:17:30 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.244.44 - - [22/May/2026:12:17:31 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 20.222.17.182 - - [22/May/2026:13:05:28 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:28 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:28 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:28 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:28 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:28 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:28 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:29 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:29 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:29 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:29 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:29 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:29 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:29 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:29 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:29 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:30 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:30 +0800] "GET /index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:30 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:30 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:30 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:30 +0800] "GET /randkeyword.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:30 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:30 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:31 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:31 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:31 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:31 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:31 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:31 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:31 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:31 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:31 +0800] "GET /wp-includes/phpmailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:32 +0800] "GET /wp-includes/requests/src/response/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:32 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:32 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:32 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:32 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:33 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:33 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:33 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:33 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:33 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:33 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:33 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:33 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:33 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:34 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:34 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:34 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:34 +0800] "GET /wp-admin/user.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:34 +0800] "GET /wp-conf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:34 +0800] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:34 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:34 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:34 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:36 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:36 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:36 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:36 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:37 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:37 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:37 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:37 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:37 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:37 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:37 +0800] "GET /kbfr.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:37 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:37 +0800] "GET /chosen.php?p= HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:38 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:38 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:38 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:38 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:38 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:38 +0800] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:39 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:39 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:39 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:39 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:39 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:39 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:39 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:39 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:40 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.222.17.182 - - [22/May/2026:13:05:40 +0800] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 34.32.33.36 - - [22/May/2026:13:44:19 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0" 138.246.253.24 - - [22/May/2026:15:20:22 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 161.118.202.128 - - [22/May/2026:17:07:04 +0800] "GET /file-manager/initialize HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 161.118.202.128 - - [22/May/2026:17:07:04 +0800] "GET /file-manager/initialize HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 137.184.236.209 - - [22/May/2026:18:49:14 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 137.184.236.209 - - [22/May/2026:18:49:14 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "http://test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 137.184.236.209 - - [22/May/2026:18:49:15 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 137.184.236.209 - - [22/May/2026:18:49:19 +0800] "GET /favicon.ico HTTP/1.1" 403 261 "https://test.thegreenscapecollective.com.au/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 34.24.174.132 - - [22/May/2026:21:11:57 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 34.133.83.175 - - [22/May/2026:21:56:12 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 35.188.61.13 - - [22/May/2026:22:19:42 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 34.7.0.66 - - [22/May/2026:22:20:34 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 192.109.200.215 - - [23/May/2026:02:05:43 +0800] "GET /test.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.215 - - [23/May/2026:02:05:44 +0800] "GET /_profiler/phpinfo HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.215 - - [23/May/2026:02:05:44 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.215 - - [23/May/2026:02:05:45 +0800] "GET /php.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.215 - - [23/May/2026:02:05:45 +0800] "GET /php_info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.215 - - [23/May/2026:02:05:45 +0800] "GET /i.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.215 - - [23/May/2026:02:05:45 +0800] "GET /pi.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.215 - - [23/May/2026:02:05:46 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.215 - - [23/May/2026:02:05:46 +0800] "GET /admin/phpinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.215 - - [23/May/2026:02:05:46 +0800] "GET /pinfo.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.215 - - [23/May/2026:02:05:48 +0800] "GET /php_version.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.215 - - [23/May/2026:02:05:51 +0800] "GET /.aws/credentials HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.215 - - [23/May/2026:02:05:52 +0800] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.215 - - [23/May/2026:02:05:53 +0800] "GET /.env.example HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.215 - - [23/May/2026:02:06:05 +0800] "GET /.env.backup HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 20.206.112.47 - - [23/May/2026:05:38:43 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:38:43 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:38:44 +0800] "GET /sx_pms.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:38:44 +0800] "GET /wp-info.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:38:44 +0800] "GET /000.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:38:45 +0800] "GET /wp-test.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:38:45 +0800] "GET /like.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:38:45 +0800] "GET /we.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:38:46 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:38:46 +0800] "GET /wp-indx.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:38:47 +0800] "GET /zoo.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:38:47 +0800] "GET /wp-link-spm.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:38:47 +0800] "GET /wp-link-snpm.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:38:48 +0800] "GET /xminie.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:38:48 +0800] "GET /aaa.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:38:48 +0800] "GET /bal.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:38:49 +0800] "GET /ws81.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:38:49 +0800] "GET /drykl.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:38:49 +0800] "GET /av.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:38:50 +0800] "GET /11.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:38:50 +0800] "GET /77.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:38:50 +0800] "GET /x402.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:38:51 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:38:51 +0800] "GET /1.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:38:52 +0800] "GET /tiny.php HTTP/1.1" 403 199 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:03 +0800] "GET /w.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:04 +0800] "GET /test1.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:04 +0800] "GET /tires.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:04 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:05 +0800] "GET /d.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:05 +0800] "GET /cu.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:05 +0800] "GET /fone1.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:06 +0800] "GET /sallu.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:06 +0800] "GET /ng.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:06 +0800] "GET /link.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:07 +0800] "GET /xxx.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:07 +0800] "GET /BDKR28WP.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:07 +0800] "GET /edit.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:08 +0800] "GET /pp.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:08 +0800] "GET /one.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:08 +0800] "GET /error_log.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:09 +0800] "GET /a7.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:09 +0800] "GET /roksad1.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:09 +0800] "GET /axe.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:10 +0800] "GET /de.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:10 +0800] "GET /aa.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:10 +0800] "GET /100.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:11 +0800] "GET /f5.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:11 +0800] "GET /view.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:11 +0800] "GET /bc.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:12 +0800] "GET /tx79.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:12 +0800] "GET /moshou.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:12 +0800] "GET /lib.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:13 +0800] "GET /zoper1.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:13 +0800] "GET /19.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:13 +0800] "GET /geforce.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:14 +0800] "GET /dostshell.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:14 +0800] "GET /doc.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:14 +0800] "GET /mar.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:15 +0800] "GET /casp1.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:15 +0800] "GET /a1.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:15 +0800] "GET /ms-edit.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:16 +0800] "GET /8.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:16 +0800] "GET /xltt.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:16 +0800] "GET /cilus.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:17 +0800] "GET /press.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:17 +0800] "GET /file6.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:17 +0800] "GET /ss.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:17 +0800] "GET /ws78.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:18 +0800] "GET /options.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:18 +0800] "GET /min.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:19 +0800] "GET /img.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:19 +0800] "GET /7.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:19 +0800] "GET /ggb.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:19 +0800] "GET /xxa.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:20 +0800] "GET /aj11.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:20 +0800] "GET /fs.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:21 +0800] "GET /2.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:21 +0800] "GET /man.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:21 +0800] "GET /12.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:21 +0800] "GET /acp.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:24 +0800] "GET /wps.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:24 +0800] "GET /alpha.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:25 +0800] "GET /bob.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:25 +0800] "GET /yuzuru1.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:27 +0800] "GET /insta.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:27 +0800] "GET /wp-kz.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:27 +0800] "GET /xs.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:28 +0800] "GET /2026w.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:28 +0800] "GET /f35.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:28 +0800] "GET /xwx1.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:29 +0800] "GET /xmu.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:29 +0800] "GET /simple.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:30 +0800] "GET /ayk.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:30 +0800] "GET /gecko.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:31 +0800] "GET /wpxml.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:31 +0800] "GET /zo.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:31 +0800] "GET /sky.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:32 +0800] "GET /rh.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:32 +0800] "GET /ortasekerli1.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:33 +0800] "GET /xstelth.php HTTP/1.1" 403 261 "-" "-" 20.206.112.47 - - [23/May/2026:05:39:33 +0800] "GET /3369.php HTTP/1.1" 403 261 "-" "-" 138.246.253.24 - - [23/May/2026:22:32:24 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 161.118.230.210 - - [23/May/2026:23:53:15 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 31.57.216.172 - - [24/May/2026:06:58:55 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:32:48 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:32:48 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:32:48 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:32:48 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:32:48 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:32:49 +0800] "GET /.git-credentials HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:32:49 +0800] "GET /.git/credentials HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:32:50 +0800] "POST / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:32:50 +0800] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:32:51 +0800] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:32:52 +0800] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:32:52 +0800] "GET /.env.staging HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:32:53 +0800] "GET /.env.development HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:32:54 +0800] "GET /.env.test HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:32:55 +0800] "GET /.env.remote HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:32:55 +0800] "GET /.env.bak HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:32:56 +0800] "GET /.env.backup HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:32:57 +0800] "GET /.env.save HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:32:58 +0800] "GET /.env.old HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:32:58 +0800] "GET /.env.sample HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:32:59 +0800] "GET /.env.example HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:33:00 +0800] "GET /.env.dev HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:33:00 +0800] "GET /.env.prod HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:33:01 +0800] "GET /.env.stage HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:33:02 +0800] "GET /.env.ci HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:33:03 +0800] "GET /.env.docker HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:33:03 +0800] "GET /.env.live HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:33:04 +0800] "GET /.env.preprod HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:33:05 +0800] "GET /.env.uat HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:33:06 +0800] "GET /.env.dist HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:33:06 +0800] "GET /.env.swp HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:33:07 +0800] "GET /.env~ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:33:08 +0800] "GET /.env1 HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:33:08 +0800] "GET /.env2 HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:33:09 +0800] "GET /.env_copy HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:33:10 +0800] "GET /.env.txt HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:33:11 +0800] "GET /.env.json HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:33:11 +0800] "GET /.env.yaml HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:33:12 +0800] "GET /.env.yml HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:33:13 +0800] "GET /app/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:33:14 +0800] "GET /apps/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:33:14 +0800] "GET /api/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:33:15 +0800] "GET /web/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:33:16 +0800] "GET /site/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.244.105.124 - - [24/May/2026:10:33:16 +0800] "GET /public/.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 161.118.230.210 - - [24/May/2026:12:37:33 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 4.228.100.214 - - [24/May/2026:14:30:22 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:22 +0800] "GET /revealability.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:23 +0800] "GET /ok.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:23 +0800] "GET /tires.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:23 +0800] "GET /amxloxxr.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:24 +0800] "GET /wp-block.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:24 +0800] "GET /wehrman.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:24 +0800] "GET /wp-thi.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:25 +0800] "GET /z.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:25 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:25 +0800] "GET /333.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:26 +0800] "GET /edit.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:26 +0800] "GET /wp-load.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:26 +0800] "GET /atomlib.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:27 +0800] "GET /wp-der.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:27 +0800] "GET /ftde.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:27 +0800] "GET /asasx.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:28 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:28 +0800] "GET /app.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:28 +0800] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:28 +0800] "GET /wuasr.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:29 +0800] "GET /bthil.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:29 +0800] "GET /albin.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:29 +0800] "GET /wefile.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:30 +0800] "GET /file30.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:30 +0800] "GET /file4.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:30 +0800] "GET /dropdown.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:31 +0800] "GET /txets.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:31 +0800] "GET /wp-access.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:31 +0800] "GET /aevly.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:32 +0800] "GET /vx.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:32 +0800] "GET /wp-wz.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:32 +0800] "GET /crgio.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:33 +0800] "GET /new.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:33 +0800] "GET /wp.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:33 +0800] "GET /ccou.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:34 +0800] "GET /db.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:34 +0800] "GET /lib.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:34 +0800] "GET /yellow.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:35 +0800] "GET /mifta.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:35 +0800] "GET /wp-firewall.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:35 +0800] "GET /fun.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:36 +0800] "GET /drykl.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:36 +0800] "GET /sys.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:36 +0800] "GET /1index.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:37 +0800] "GET /shell20211028.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:37 +0800] "GET /wp-ver.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:37 +0800] "GET /lala.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:38 +0800] "GET /sbhu.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:38 +0800] "GET /wp-sing.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:38 +0800] "GET /file59.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:39 +0800] "GET /wp-slss.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:39 +0800] "GET /x.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:39 +0800] "GET /atkno.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:39 +0800] "GET /ff.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:40 +0800] "GET /yas.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:40 +0800] "GET /png.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:40 +0800] "GET /wmore1.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:41 +0800] "GET /ah25.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:41 +0800] "GET /forbidals.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:41 +0800] "GET /lv.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:42 +0800] "GET /explorer/index_.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:42 +0800] "GET /xda.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:42 +0800] "GET /samll.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:43 +0800] "GET /wp-at.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:43 +0800] "GET /wp-kd4xalrg7m.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:43 +0800] "GET /wp-the.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:44 +0800] "GET /ff1.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:44 +0800] "GET /cilus.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:44 +0800] "GET /Okxob.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:44 +0800] "GET /pass4.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:45 +0800] "GET /wp-su.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:45 +0800] "GET /like.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:46 +0800] "GET /mass.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:46 +0800] "GET /i.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:46 +0800] "GET //test.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:47 +0800] "GET /la.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:47 +0800] "GET /reze.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:47 +0800] "GET /database.php HTTP/1.1" 403 261 "-" "-" 4.228.100.214 - - [24/May/2026:14:30:48 +0800] "GET /favicon.php HTTP/1.1" 403 261 "-" "-" 8.229.79.99 - - [24/May/2026:17:57:46 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.229.79.99 - - [24/May/2026:17:57:46 +0800] "GET /wp-includes/ID3/license.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.229.79.99 - - [24/May/2026:17:57:46 +0800] "GET /feed/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.229.79.99 - - [24/May/2026:17:57:46 +0800] "GET /xmlrpc.php?rsd HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.229.79.99 - - [24/May/2026:17:57:47 +0800] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.229.79.99 - - [24/May/2026:17:57:47 +0800] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.229.79.99 - - [24/May/2026:17:57:47 +0800] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.229.79.99 - - [24/May/2026:17:57:47 +0800] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.229.79.99 - - [24/May/2026:17:57:48 +0800] "GET /2020/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.229.79.99 - - [24/May/2026:17:57:48 +0800] "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.229.79.99 - - [24/May/2026:17:57:48 +0800] "GET /2021/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.229.79.99 - - [24/May/2026:17:57:49 +0800] "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.229.79.99 - - [24/May/2026:17:57:49 +0800] "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.229.79.99 - - [24/May/2026:17:57:49 +0800] "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.229.79.99 - - [24/May/2026:17:57:49 +0800] "GET /site/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.229.79.99 - - [24/May/2026:17:57:49 +0800] "GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.228.125.96 - - [24/May/2026:22:42:00 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.228.125.96 - - [24/May/2026:22:42:01 +0800] "GET /wp-includes/ID3/license.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.228.125.96 - - [24/May/2026:22:42:01 +0800] "GET /feed/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.228.125.96 - - [24/May/2026:22:42:01 +0800] "GET /xmlrpc.php?rsd HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.228.125.96 - - [24/May/2026:22:42:01 +0800] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.228.125.96 - - [24/May/2026:22:42:01 +0800] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.228.125.96 - - [24/May/2026:22:42:02 +0800] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.228.125.96 - - [24/May/2026:22:42:02 +0800] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.228.125.96 - - [24/May/2026:22:42:02 +0800] "GET /2020/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.228.125.96 - - [24/May/2026:22:42:02 +0800] "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.228.125.96 - - [24/May/2026:22:42:02 +0800] "GET /2021/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.228.125.96 - - [24/May/2026:22:42:03 +0800] "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.228.125.96 - - [24/May/2026:22:42:03 +0800] "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.228.125.96 - - [24/May/2026:22:42:03 +0800] "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.228.125.96 - - [24/May/2026:22:42:03 +0800] "GET /site/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8.228.125.96 - - [24/May/2026:22:42:04 +0800] "GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 85.121.215.242 - - [24/May/2026:22:44:06 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.7; rv:133.0) Gecko/20100101 Firefox/133.0" 20.9.45.132 - - [24/May/2026:23:24:52 +0800] "GET /wk/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:52 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:52 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:53 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:53 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:53 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:53 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:53 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:54 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:54 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:54 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:54 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:54 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:55 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:55 +0800] "GET /wp-admin/user/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:55 +0800] "GET /wp-conf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:55 +0800] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:56 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:56 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:56 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:56 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:56 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:57 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:57 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:57 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:57 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:57 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:58 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:58 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:58 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:58 +0800] "GET /kbfr.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:59 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:59 +0800] "GET /chosen.php?p= HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:59 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:59 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:24:59 +0800] "GET /wp-includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:25:00 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:25:00 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:25:00 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:25:00 +0800] "GET /uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:25:00 +0800] "GET /wp-admin/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:25:01 +0800] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:25:02 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:25:02 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:25:02 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:25:03 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:25:03 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:25:03 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:25:03 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:25:03 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:25:04 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.9.45.132 - - [24/May/2026:23:25:04 +0800] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.89.89 - - [25/May/2026:04:33:37 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.206.89.89 - - [25/May/2026:04:33:37 +0800] "GET /input.php HTTP/1.1" 403 261 "-" "-" 20.206.89.89 - - [25/May/2026:04:33:37 +0800] "GET /ups.php HTTP/1.1" 403 261 "-" "-" 20.206.89.89 - - [25/May/2026:04:33:38 +0800] "GET /inf.php HTTP/1.1" 403 261 "-" "-" 20.206.89.89 - - [25/May/2026:04:33:38 +0800] "GET /wpm.php HTTP/1.1" 403 261 "-" "-" 20.206.89.89 - - [25/May/2026:04:33:38 +0800] "GET /166.php HTTP/1.1" 403 261 "-" "-" 20.206.89.89 - - [25/May/2026:04:33:39 +0800] "GET /25.php HTTP/1.1" 403 261 "-" "-" 20.206.89.89 - - [25/May/2026:04:33:39 +0800] "GET /phpinfo HTTP/1.1" 403 261 "-" "-" 20.206.89.89 - - [25/May/2026:04:33:39 +0800] "GET /eval.php HTTP/1.1" 403 261 "-" "-" 20.206.89.89 - - [25/May/2026:04:33:39 +0800] "GET /wp-config.php?p= HTTP/1.1" 403 199 "-" "-" 20.206.89.89 - - [25/May/2026:04:33:40 +0800] "GET /hplfuns.php HTTP/1.1" 403 261 "-" "-" 20.206.89.89 - - [25/May/2026:04:33:40 +0800] "GET /hello.php HTTP/1.1" 403 261 "-" "-" 20.206.89.89 - - [25/May/2026:04:33:41 +0800] "GET /php-health.php HTTP/1.1" 403 261 "-" "-" 20.206.89.89 - - [25/May/2026:04:33:41 +0800] "GET /test.php1 HTTP/1.1" 403 261 "-" "-" 20.206.89.89 - - [25/May/2026:04:33:41 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.206.89.89 - - [25/May/2026:04:33:42 +0800] "GET /demo/cache.php?p= HTTP/1.1" 403 261 "-" "-" 20.206.89.89 - - [25/May/2026:04:33:42 +0800] "GET /autoload.php HTTP/1.1" 403 261 "-" "-" 20.206.89.89 - - [25/May/2026:04:33:42 +0800] "GET /phpinfo.php HTTP/1.1" 403 261 "-" "-" 20.206.89.89 - - [25/May/2026:04:33:44 +0800] "GET /wp-config.php HTTP/1.1" 403 199 "-" "-" 20.206.89.89 - - [25/May/2026:04:33:44 +0800] "GET /tempfuns.php HTTP/1.1" 403 261 "-" "-" 20.203.168.197 - - [25/May/2026:10:03:16 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:17 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:17 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:17 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:17 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:17 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:18 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:18 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:18 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:18 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:19 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:19 +0800] "GET /chosen.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:19 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:20 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:20 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:20 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:20 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:20 +0800] "GET /index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:21 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:21 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:21 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:21 +0800] "GET /randkeyword.php7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:22 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:22 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:22 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:22 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:23 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:23 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:23 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:23 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:24 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:24 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:24 +0800] "GET /wp-includes/phpmailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:24 +0800] "GET /wp-includes/requests/src/response/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:25 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:26 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:26 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:26 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:26 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:27 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:27 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:27 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:27 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:28 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:28 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:28 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:28 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:29 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:29 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:29 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:29 +0800] "GET /wp-admin/user.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:30 +0800] "GET /wp-conf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:30 +0800] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:30 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:30 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:31 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:31 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:31 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:31 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:32 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:32 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:32 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:32 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:33 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:33 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:33 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:33 +0800] "GET /kbfr.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:34 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:34 +0800] "GET /chosen.php?p= HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:34 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:34 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:35 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:35 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:35 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:35 +0800] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:37 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:37 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:37 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:37 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:38 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:38 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:38 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:38 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:39 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.168.197 - - [25/May/2026:10:03:39 +0800] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.151.114.114 - - [25/May/2026:15:39:34 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:34 +0800] "GET /ups.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:34 +0800] "GET /inf.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:34 +0800] "GET /input.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:34 +0800] "GET /wpm.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:35 +0800] "GET /166.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:35 +0800] "GET /25.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:35 +0800] "GET /phpinfo HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:35 +0800] "GET /eval.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:35 +0800] "GET /wp-config.php?p= HTTP/1.1" 403 199 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:36 +0800] "GET /hplfuns.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:36 +0800] "GET /hello.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:36 +0800] "GET /index.php?p= HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:37 +0800] "GET /php-health.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:37 +0800] "GET /test.php1 HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:37 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:37 +0800] "GET /demo/cache.php?p= HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:37 +0800] "GET /autoload.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:38 +0800] "GET /phpinfo.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:38 +0800] "GET /wp-config.php HTTP/1.1" 403 199 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:38 +0800] "GET /tempfuns.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:39 +0800] "GET /file2.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:39 +0800] "GET /file25.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:39 +0800] "GET /file30.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:39 +0800] "GET /file26.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:40 +0800] "GET /file9.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:40 +0800] "GET /file23.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:40 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:40 +0800] "GET /file21.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:41 +0800] "GET /file17.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:41 +0800] "GET /file6.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:41 +0800] "GET /file13.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:41 +0800] "GET /file7.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:42 +0800] "GET /file18.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:42 +0800] "GET /file15.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:42 +0800] "GET /file16.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:42 +0800] "GET /file29.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:43 +0800] "GET /file11.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:43 +0800] "GET /file5.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:43 +0800] "GET /file4.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:43 +0800] "GET /file19.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:44 +0800] "GET /file22.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:44 +0800] "GET /file12.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:44 +0800] "GET /file28.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:44 +0800] "GET /file27.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:45 +0800] "GET /file3.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:45 +0800] "GET /file24.php HTTP/1.1" 403 261 "-" "-" 20.151.114.114 - - [25/May/2026:15:39:45 +0800] "GET /file14.php HTTP/1.1" 403 261 "-" "-" 217.113.13.133 - - [26/May/2026:02:37:46 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.43" 40.113.217.8 - - [26/May/2026:03:47:14 +0800] "GET /wk/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:14 +0800] "GET /inputs.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:14 +0800] "GET /ioxi-o.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:14 +0800] "GET /function/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:14 +0800] "GET /rip.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:15 +0800] "GET /admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:15 +0800] "GET /wp-content/uploads/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:15 +0800] "GET /cache.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:15 +0800] "GET /themes.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:16 +0800] "GET /an.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:16 +0800] "GET /index/function.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:16 +0800] "GET /randkeyword.PhP7 HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:16 +0800] "GET /ws.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:17 +0800] "GET /404.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:17 +0800] "GET /wp-admin/user/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:17 +0800] "GET /wp-conf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:17 +0800] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:17 +0800] "GET /wp-login.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:18 +0800] "GET /abc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:18 +0800] "GET /abcd.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:18 +0800] "GET /as.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:18 +0800] "GET /wp-trackback.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:18 +0800] "GET /about.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:19 +0800] "GET /file.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:19 +0800] "GET /adminfuns.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:19 +0800] "GET /wp-good.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:19 +0800] "GET /xmlrpc.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:20 +0800] "GET /goods.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:20 +0800] "GET /class-t.api.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:20 +0800] "GET /sf.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:20 +0800] "GET /kbfr.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:21 +0800] "GET /autoload_classmap.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:21 +0800] "GET /chosen.php?p= HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:21 +0800] "GET /classwithtostring.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:21 +0800] "GET /defaults.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:21 +0800] "GET /wp-includes/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:22 +0800] "GET /.well-known/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:22 +0800] "GET /info.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:22 +0800] "GET /cgi-bin/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:22 +0800] "GET /uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:22 +0800] "GET /wp-admin/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:23 +0800] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:24 +0800] "GET /wp-includes/html-api/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:24 +0800] "GET /wp-content/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:24 +0800] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:24 +0800] "GET /wp-content/uploads/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:24 +0800] "GET /wp-content/themes/admin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:25 +0800] "GET /wp-content/themes/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:25 +0800] "GET /wp-content/plugins/index.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:25 +0800] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:25 +0800] "GET /wp-includes/images/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.113.217.8 - - [26/May/2026:03:47:25 +0800] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:08 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:08 +0800] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:08 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:08 +0800] "GET /assets/vendor/jquery.filer/php/readme.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:08 +0800] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:08 +0800] "GET /plugins/jquery.filer/php/readme.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:08 +0800] "GET /assets/plugins/jQuery-File-Upload/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:08 +0800] "GET /assets/admin/bower_components/jquery.filer/php/readme.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:08 +0800] "GET /file-manager/initialize HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:08 +0800] "POST /alfacgiapi/perl.alfa HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:08 +0800] "GET /static/lib/jquery-file-upload/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /assets/plugins/jquery.filer/php/readme.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /vendor/laravel-filemanager/js/script.js HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /jquery.filer/php/readme.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /assets/app-assets/data/jquery-file-upload/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /asset_admin/assets/plugins/jquery-file-upload/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /assets/js/frontend/jquery-file-upload/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /jquery-file-upload/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /fileupload/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /admin/jquery-file-upload/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /admin/blueimp-jQuery-File-Upload/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /plugins/jQuery-File-Upload/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /blueimp-jQuery-File-Upload/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /upload/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /public/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /admin/galerie/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /admin/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /assets/global/plugins/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /libraries/jsupload/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /assets/global/plugins/jquery-file-upload/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /assets/plugins/js/jquery-file-upload/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /assets/plugins/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /assets/plugins/js/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /assets/plugins/jquery-file-upload/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /plugins/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /asset/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /js/kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /assets/jquery-file-upload/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /js/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /assets/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /asset/kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /assets/kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /plugins/kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /assets/plugins/kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /plugins/js/jquery-file-upload/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /plugin/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /js/jquery-file-upload/server/php/ HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /components/kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /assets/js/kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /core/scripts/kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /ckeditor/plugins/kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /ckeditor/kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /lib/kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /js/tinymce/kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /media/kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /libs/kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /core/scripts/wysiwyg/kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /app/webroot/js/kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /jquery/kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /admin/kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /admin/ckeditor/kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /application/themes/admin/assets/js/kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /app/webroot/kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /admin/ckeditor/plugins/kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /scripts/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /admin/js/kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /assets/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /assets/plugins/tinymce/plugins/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /asset/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /admin/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /assets/tinymce/plugins/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /phpformbuilder/plugins/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /assets/plugins/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /admin/core/kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /assets/scripts/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /filemanager/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /assets/admin/tinymce/plugins/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /assets/admin/js/tinymce/plugins/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /tinymce/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /tinymce/plugins/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /js/tinymce4/plugins/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /media/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /cms/tinymce/filemanager/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /public/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /js/fileManager/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /public/scripts/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /public/js/libraries/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /lib/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /admin/events/lib/external/responsive_filemanager/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:09 +0800] "GET /editor/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:10 +0800] "GET /resources/plugins/tiny_mce/plugins/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:10 +0800] "GET /resources/js/tinymce/plugins/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:10 +0800] "GET /responsive_filemanager/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:10 +0800] "GET /assets/responsive_filemanager/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:10 +0800] "GET /plugins/responsive_filemanager/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:10 +0800] "GET /cms/vendor/responsive_filemanager/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:10 +0800] "GET /admin/responsive_filemanager/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 134.199.156.173 - - [26/May/2026:11:50:10 +0800] "GET /arquivos/javascript/responsive_filemanager/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 74.7.175.175 - - [26/May/2026:12:33:22 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.227.61 - - [26/May/2026:12:33:23 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 142.248.80.6 - - [26/May/2026:13:39:41 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 170.64.238.42 - - [26/May/2026:16:21:42 +0800] "GET /application/themes/admin/assets/js/kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 170.64.238.42 - - [26/May/2026:16:21:42 +0800] "GET /admin/ckeditor/kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 170.64.238.42 - - [26/May/2026:16:21:42 +0800] "GET /filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 170.64.238.42 - - [26/May/2026:16:21:42 +0800] "GET /scripts/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 170.64.238.42 - - [26/May/2026:16:21:42 +0800] "GET /phpformbuilder/plugins/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 170.64.238.42 - - [26/May/2026:16:21:42 +0800] "GET /admin/js/kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 170.64.238.42 - - [26/May/2026:16:21:42 +0800] "GET /assets/scripts/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 170.64.238.42 - - [26/May/2026:16:21:42 +0800] "GET /assets/plugins/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 170.64.238.42 - - [26/May/2026:16:21:42 +0800] "GET /js/tinymce4/plugins/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 170.64.238.42 - - [26/May/2026:16:21:42 +0800] "GET /media/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 170.64.238.42 - - [26/May/2026:16:21:42 +0800] "GET /js/fileManager/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 170.64.238.42 - - [26/May/2026:16:21:42 +0800] "GET /public/scripts/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 170.64.238.42 - - [26/May/2026:16:21:42 +0800] "GET /public/js/libraries/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 170.64.238.42 - - [26/May/2026:16:21:42 +0800] "GET /admin/events/lib/external/responsive_filemanager/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 170.64.238.42 - - [26/May/2026:16:21:42 +0800] "GET /admin/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 170.64.238.42 - - [26/May/2026:16:21:44 +0800] "GET /admin/core/kcfinder/upload.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 170.64.238.42 - - [26/May/2026:16:21:44 +0800] "GET /plugins/responsive_filemanager/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 170.64.238.42 - - [26/May/2026:16:21:44 +0800] "GET /arquivos/javascript/responsive_filemanager/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 170.64.238.42 - - [26/May/2026:16:21:44 +0800] "GET /admin/responsive_filemanager/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 170.64.238.42 - - [26/May/2026:16:21:44 +0800] "GET /cms/vendor/responsive_filemanager/filemanager/dialog.php HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 74.7.244.44 - - [26/May/2026:21:12:48 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.241.2 - - [26/May/2026:21:12:49 +0800] "GET / HTTP/1.1" 403 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 35.94.157.46 - - [26/May/2026:22:58:38 +0800] "GET /robots.txt HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)" 35.94.157.46 - - [26/May/2026:22:58:38 +0800] "GET /enhancecp HTTP/1.1" 403 261 "-" "Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)"