文件操作 - redlightbenefits.log.1
返回文件管理
返回主菜单
删除本文件
文件: /storage/v12552/redlightbenefits/logs/redlightbenefits.log.1
编辑文件内容
37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:00:04:26 +0000] "POST /wp-cron.php?doing_wp_cron=1785283466.2445120811462402343750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 113.160.142.119 - - - 200 BYPASS - - [29/Jul/2026:00:04:26 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "113.160.142.119, 113.160.142.119, 113.160.142.119, 113.160.142.119" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:00:17:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785284223.4175589084625244140625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:00:17:04 +0000] "POST /wp-cron.php?doing_wp_cron=1785284224.1085469722747802734375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:00:17:05 +0000] "POST /wp-cron.php?doing_wp_cron=1785284225.0654070377349853515625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 43.130.16.140 - - - 500 MISS - - [29/Jul/2026:00:17:05 +0000] "GET / HTTP/1.1" 3573 "https://www.redlighthealthbenefits.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "43.130.16.140, 43.130.16.140, 43.130.16.140, 43.130.16.140" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:00:19:16 +0000] "POST /wp-cron.php?doing_wp_cron=1785284355.4925570487976074218750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 161.97.105.197 - - - 200 BYPASS - - [29/Jul/2026:00:19:16 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "161.97.105.197, 161.97.105.197, 161.97.105.197, 161.97.105.197" 161.97.105.197 - _uid=0100007F0447696A3843B74702F50903 - 200 BYPASS - - [29/Jul/2026:00:19:17 +0000] "POST /wp-login.php HTTP/1.1" 2802 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "161.97.105.197, 161.97.105.197, 161.97.105.197, 161.97.105.197" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:00:24:14 +0000] "POST /wp-cron.php?doing_wp_cron=1785284653.8795399665832519531250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 103.174.51.103 - - - 200 BYPASS - - [29/Jul/2026:00:24:14 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.174.51.103, 103.174.51.103, 103.174.51.103, 103.174.51.103" 103.174.51.103 - _uid=0100007F2E48696A3843B74702570B03 - 200 BYPASS - - [29/Jul/2026:00:24:15 +0000] "POST /wp-login.php HTTP/1.1" 2802 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.174.51.103, 103.174.51.103, 103.174.51.103, 103.174.51.103" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:00:27:43 +0000] "POST /wp-cron.php?doing_wp_cron=1785284862.8055241107940673828125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 103.90.234.13 - - - 200 BYPASS - - [29/Jul/2026:00:27:43 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.90.234.13, 103.90.234.13, 103.90.234.13, 103.90.234.13" 103.90.234.13 - _uid=0100007FFF48696A3843B74702450C03 - 200 BYPASS - - [29/Jul/2026:00:27:44 +0000] "POST /wp-login.php HTTP/1.1" 2805 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.90.234.13, 103.90.234.13, 103.90.234.13, 103.90.234.13" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:00:29:46 +0000] "POST /wp-cron.php?doing_wp_cron=1785284986.2282021045684814453125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 85.254.40.167 - - - 500 MISS - - [29/Jul/2026:00:29:46 +0000] "GET /2024/02/21/red-light-therapy-for-skin-health/ HTTP/1.1" 3639 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "85.254.40.167, 85.254.40.167, 85.254.40.167, 85.254.40.167" 216.73.216.14 - _uid=0100007FB2C7686A6022FC3A02C59A03 - 200 HIT - - [29/Jul/2026:00:38:14 +0000] "GET /sitemap_index.xml HTTP/1.1" 1159 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "216.73.216.14, 216.73.216.14, 216.73.216.14, 216.73.216.14" 104.234.140.43 - - - 403 BYPASS - - [29/Jul/2026:00:44:13 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.43, 104.234.140.43, 104.234.140.43, 104.234.140.43" 104.234.140.34 - - - 403 BYPASS - - [29/Jul/2026:00:44:14 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.34, 104.234.140.34, 104.234.140.34, 104.234.140.34" 104.234.140.57 - - - 403 BYPASS - - [29/Jul/2026:00:44:15 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.57, 104.234.140.57, 104.234.140.57, 104.234.140.57" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:00:47:51 +0000] "POST /wp-cron.php?doing_wp_cron=1785286070.6142280101776123046875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 195.250.23.54 - - - 200 BYPASS - - [29/Jul/2026:00:47:51 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.250.23.54, 195.250.23.54, 195.250.23.54, 195.250.23.54" 195.250.23.54 - _uid=0100007FB74D696A3743AF4702A20703 - 200 BYPASS - - [29/Jul/2026:00:47:52 +0000] "POST /wp-login.php HTTP/1.1" 2802 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.250.23.54, 195.250.23.54, 195.250.23.54, 195.250.23.54" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:01:03:53 +0000] "POST /wp-cron.php?doing_wp_cron=1785287033.0833969116210937500000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 216.73.216.14 - - - 500 MISS - - [29/Jul/2026:01:03:53 +0000] "GET / HTTP/1.1" 3573 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "216.73.216.14, 216.73.216.14, 216.73.216.14, 216.73.216.14" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:01:11:24 +0000] "POST /wp-cron.php?doing_wp_cron=1785287484.2946760654449462890625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 198.38.94.17 - - - 200 BYPASS - - [29/Jul/2026:01:11:24 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17, 198.38.94.17, 198.38.94.17, 198.38.94.17" 198.38.94.17 - _uid=0100007F3C53696A3743AF47021B0A03 - 200 BYPASS - - [29/Jul/2026:01:11:26 +0000] "POST /wp-login.php HTTP/1.1" 2805 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17, 198.38.94.17, 198.38.94.17, 198.38.94.17" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:01:13:25 +0000] "POST /wp-cron.php?doing_wp_cron=1785287604.6102309226989746093750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 135.148.171.117 - - - 200 BYPASS - - [29/Jul/2026:01:13:25 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 135.148.171.117 - _uid=0100007FB553696A3843B74702561E03 - 200 BYPASS - - [29/Jul/2026:01:13:26 +0000] "POST /wp-login.php HTTP/1.1" 2802 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:01:17:30 +0000] "POST /wp-cron.php?doing_wp_cron=1785287849.8000719547271728515625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 103.221.220.99 - - - 200 BYPASS - - [29/Jul/2026:01:17:30 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.221.220.99, 103.221.220.99, 103.221.220.99, 103.221.220.99" 103.221.220.99 - _uid=0100007FAA54696A3843B74702042003 - 200 BYPASS - - [29/Jul/2026:01:17:31 +0000] "POST /wp-login.php HTTP/1.1" 2805 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.221.220.99, 103.221.220.99, 103.221.220.99, 103.221.220.99" 104.234.140.56 - - - 403 BYPASS - - [29/Jul/2026:01:18:37 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.56, 104.234.140.56, 104.234.140.56, 104.234.140.56" 104.234.140.53 - - - 403 BYPASS - - [29/Jul/2026:01:18:37 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.53, 104.234.140.53, 104.234.140.53, 104.234.140.53" 104.234.140.54 - - - 403 BYPASS - - [29/Jul/2026:01:18:38 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.54, 104.234.140.54, 104.234.140.54, 104.234.140.54" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:01:44:13 +0000] "POST /wp-cron.php?doing_wp_cron=1785289452.6259150505065917968750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 195.250.23.54 - - - 200 BYPASS - - [29/Jul/2026:01:44:13 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.250.23.54, 195.250.23.54, 195.250.23.54, 195.250.23.54" 195.250.23.54 - _uid=0100007FED5A696A8BF0B71F02D00403 - 200 BYPASS - - [29/Jul/2026:01:44:15 +0000] "POST /wp-login.php HTTP/1.1" 2802 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.250.23.54, 195.250.23.54, 195.250.23.54, 195.250.23.54" 156.244.46.207 - - - 200 BYPASS - - [29/Jul/2026:01:44:28 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "156.244.46.207, 156.244.46.207, 156.244.46.207, 156.244.46.207" 156.244.46.207 - _uid=0100007FFC5A696A8BF0B71F02D10403 - 200 BYPASS - - [29/Jul/2026:01:44:29 +0000] "POST /wp-login.php HTTP/1.1" 2805 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "156.244.46.207, 156.244.46.207, 156.244.46.207, 156.244.46.207" 104.234.140.104 - - - 403 BYPASS - - [29/Jul/2026:01:55:22 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.104, 104.234.140.104, 104.234.140.104, 104.234.140.104" 104.234.140.96 - - - 403 BYPASS - - [29/Jul/2026:01:55:22 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.96, 104.234.140.96, 104.234.140.96, 104.234.140.96" 104.234.140.111 - - - 403 BYPASS - - [29/Jul/2026:01:55:22 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.111, 104.234.140.111, 104.234.140.111, 104.234.140.111" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:02:04:34 +0000] "POST /wp-cron.php?doing_wp_cron=1785290673.9834759235382080078125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 213.171.211.213 - - - 200 BYPASS - - [29/Jul/2026:02:04:34 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "213.171.211.213, 213.171.211.213, 213.171.211.213, 213.171.211.213" 213.171.211.213 - _uid=0100007FB25F696A8BF0B71F025B0703 - 200 BYPASS - - [29/Jul/2026:02:04:36 +0000] "POST /wp-login.php HTTP/1.1" 2802 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "213.171.211.213, 213.171.211.213, 213.171.211.213, 213.171.211.213" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:04:44 +0000] "GET /admin/upload/css.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:04:44 +0000] "GET /wp-admin/images/about.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:04:44 +0000] "GET /wp-includes/autoloadclassmap.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:04:45 +0000] "GET /wp-class.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:04:45 +0000] "GET /acp.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:04:45 +0000] "GET /g.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:04:45 +0000] "GET /.well-known/caches.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:04:46 +0000] "GET /wp-admin/classwithtostring.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:04:46 +0000] "GET /wp-includes/css/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:04:46 +0000] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:02:04:48 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=c3ab40a978 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 20.151.221.234 - - - 302 BYPASS - - [29/Jul/2026:02:04:48 +0000] "GET /wp-admin/network/admin.php HTTP/1.1" 618 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:04:48 +0000] "GET /wp-includes/Requests/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:04:48 +0000] "GET /wp-includes/widgets/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:04:48 +0000] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:04:49 +0000] "GET /themes.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:04:49 +0000] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:04:49 +0000] "GET /content.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:04:50 +0000] "GET /wp-includes/fonts/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:04:50 +0000] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:04:50 +0000] "GET /cgi-bin/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:04:50 +0000] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:04:51 +0000] "GET /wp-admin/images/cloud.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:04:51 +0000] "GET /wp-admin/css/about.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:04:51 +0000] "GET /wp-includes/customize/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:04:52 +0000] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:04:52 +0000] "GET /files.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:04:52 +0000] "GET /wp-includes/Text/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:04:52 +0000] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:04:53 +0000] "GET /.well-known/pki-validation/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:04:53 +0000] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:04:53 +0000] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:04:53 +0000] "GET /wp-includes/rest-api/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:04:54 +0000] "GET /ws.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:04:54 +0000] "GET /wp-includes/images/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:04:54 +0000] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:04:54 +0000] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:04:55 +0000] "GET /wp-admin/images/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:02:04:56 +0000] "POST /wp-cron.php?doing_wp_cron=1785290696.1089320182800292968750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:02:04:57 +0000] "POST /wp-cron.php?doing_wp_cron=1785290696.7199358940124511718750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:04:57 +0000] "GET /wp-trackback.php HTTP/1.1" 537 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:04:57 +0000] "GET /wp-content/uploads/cong.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:04:57 +0000] "GET /wp-content/plugins/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 302 BYPASS - - [29/Jul/2026:02:04:58 +0000] "GET /wp-admin/index.php HTTP/1.1" 608 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:04:59 +0000] "GET /webadmin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 302 BYPASS - - [29/Jul/2026:02:05:00 +0000] "GET /wp-admin/ HTTP/1.1" 599 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:05:00 +0000] "GET /wp-includes/images/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:05:00 +0000] "GET /ova.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:05:00 +0000] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:05:01 +0000] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 302 BYPASS - - [29/Jul/2026:02:05:02 +0000] "GET /wp-admin/users.php HTTP/1.1" 608 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:05:02 +0000] "GET /defaults.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:05:02 +0000] "GET /wp-includes/blocks/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:05:03 +0000] "GET /wp-includes/Text/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:05:03 +0000] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:05:03 +0000] "GET /wp-content/themes/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:05:03 +0000] "GET /wp-includes/plugins.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:05:04 +0000] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:05:04 +0000] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:05:04 +0000] "GET /wp-admin/css/network.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:05:05 +0000] "GET /assets/bypass.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:05:05 +0000] "GET /sx.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:05:05 +0000] "GET /wp-admin/images/chosen.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:05:05 +0000] "GET /wp-includes/wp-class.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:05:06 +0000] "GET /wp-admin/install.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:05:06 +0000] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:05:06 +0000] "GET /cgi-bin/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:05:06 +0000] "GET /wp-admin/css/colors/about.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:05:07 +0000] "GET /wp-admin/js/about.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:05:07 +0000] "GET /comfunctions.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:05:07 +0000] "GET /images/class-config.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:05:07 +0000] "GET /wp-includes/widgets/include.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:05:08 +0000] "GET /install.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:05:08 +0000] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:05:08 +0000] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 500 MISS - - [29/Jul/2026:02:05:10 +0000] "GET /.well-known/file.php/ HTTP/1.1" 3390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:05:10 +0000] "GET /wp-includes/SimplePie/gzdecodes.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:05:10 +0000] "GET /wp-back.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:05:10 +0000] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:05:11 +0000] "GET /themes/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:02:10:21 +0000] "POST /wp-cron.php?doing_wp_cron=1785291021.3960740566253662109375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 157.66.47.83 - - - 200 BYPASS - - [29/Jul/2026:02:10:22 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "157.66.47.83, 157.66.47.83, 157.66.47.83, 157.66.47.83" 157.66.47.83 - _uid=0100007F0E61696A8BF0B71F026A0803 - 200 BYPASS - - [29/Jul/2026:02:10:24 +0000] "POST /wp-login.php HTTP/1.1" 2805 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "157.66.47.83, 157.66.47.83, 157.66.47.83, 157.66.47.83" 216.244.66.226 - - - 200 BYPASS - - [29/Jul/2026:02:12:16 +0000] "GET /2024/02/21/red-light-therapy-for-skin-health/feed/ HTTP/1.1" 241 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" "216.244.66.226, 216.244.66.226, 216.244.66.226, 216.244.66.226" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:02:14:14 +0000] "POST /wp-cron.php?doing_wp_cron=1785291254.1002650260925292968750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 167.71.240.77 - - - 200 BYPASS - - [29/Jul/2026:02:14:14 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.71.240.77, 167.71.240.77, 167.71.240.77, 167.71.240.77" 167.71.240.77 - _uid=0100007FF661696A8BF0B71F02A60903 - 200 BYPASS - - [29/Jul/2026:02:14:15 +0000] "POST /wp-login.php HTTP/1.1" 2805 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.71.240.77, 167.71.240.77, 167.71.240.77, 167.71.240.77" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:02:26:43 +0000] "POST /wp-cron.php?doing_wp_cron=1785292003.0699930191040039062500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 216.73.216.14 - _uid=0100007FB2C7686A6022FC3A02C59A03 - 200 MISS - - [29/Jul/2026:02:26:43 +0000] "GET /sitemap_index.xml HTTP/1.1" 1179 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "216.73.216.14, 216.73.216.14, 216.73.216.14, 216.73.216.14" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:02:31:00 +0000] "POST /wp-cron.php?doing_wp_cron=1785292260.4461998939514160156250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 98.70.32.248 - - - 200 BYPASS - - [29/Jul/2026:02:31:01 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "98.70.32.248, 98.70.32.248, 98.70.32.248, 98.70.32.248" 98.70.32.248 - _uid=0100007FE565696A8BF0B71F02190B03 - 200 BYPASS - - [29/Jul/2026:02:31:02 +0000] "POST /wp-login.php HTTP/1.1" 2802 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "98.70.32.248, 98.70.32.248, 98.70.32.248, 98.70.32.248" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:02:36:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785292618.8889889717102050781250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 20.54.134.42 - - - 200 BYPASS - - [29/Jul/2026:02:36:59 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "20.54.134.42, 20.54.134.42, 20.54.134.42, 20.54.134.42" 20.54.134.42 - _uid=0100007F4B67696A8BF0B71F02D00B03 - 200 BYPASS - - [29/Jul/2026:02:37:00 +0000] "POST /wp-login.php HTTP/1.1" 2805 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "20.54.134.42, 20.54.134.42, 20.54.134.42, 20.54.134.42" 57.141.0.11 - - - 200 BYPASS - - [29/Jul/2026:02:42:56 +0000] "GET /locations.kml HTTP/1.1" 253 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" "57.141.0.11, 57.141.0.11, 57.141.0.11, 57.141.0.11" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:02:54:11 +0000] "POST /wp-cron.php?doing_wp_cron=1785293650.4897720813751220703125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 52.232.35.131 - - - 200 BYPASS - - [29/Jul/2026:02:54:11 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "52.232.35.131, 52.232.35.131, 52.232.35.131, 52.232.35.131" 52.232.35.131 - _uid=0100007F536B696A8BF0B71F02B70C03 - 200 BYPASS - - [29/Jul/2026:02:54:12 +0000] "POST /wp-login.php HTTP/1.1" 2802 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "52.232.35.131, 52.232.35.131, 52.232.35.131, 52.232.35.131" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:03:02:31 +0000] "POST /wp-cron.php?doing_wp_cron=1785294151.3567728996276855468750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 188.165.193.149 - - - 500 MISS - - [29/Jul/2026:03:02:32 +0000] "GET / HTTP/1.1" 3573 "-" "tranco-crawler/1.0" "188.165.193.149, 188.165.193.149, 188.165.193.149, 188.165.193.149" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:03:18:51 +0000] "POST /wp-cron.php?doing_wp_cron=1785295131.1919620037078857421875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 45.11.97.227 - - - 200 BYPASS - - [29/Jul/2026:03:18:51 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "45.11.97.227, 45.11.97.227, 45.11.97.227, 45.11.97.227" 45.11.97.227 - _uid=0100007F1B71696A92F0672002D10503 - 200 BYPASS - - [29/Jul/2026:03:18:53 +0000] "POST /wp-login.php HTTP/1.1" 2802 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "45.11.97.227, 45.11.97.227, 45.11.97.227, 45.11.97.227" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:03:39:57 +0000] "POST /wp-cron.php?doing_wp_cron=1785296396.4556679725646972656250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 57.128.47.115 - - - 200 BYPASS - - [29/Jul/2026:03:39:57 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "57.128.47.115, 57.128.47.115, 57.128.47.115, 57.128.47.115" 57.128.47.115 - _uid=0100007F0D76696A8BF0B71F028B1003 - 200 BYPASS - - [29/Jul/2026:03:39:58 +0000] "POST /wp-login.php HTTP/1.1" 2802 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "57.128.47.115, 57.128.47.115, 57.128.47.115, 57.128.47.115" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:03:49:14 +0000] "POST /wp-cron.php?doing_wp_cron=1785296954.0074028968811035156250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 195.250.26.52 - - - 200 BYPASS - - [29/Jul/2026:03:49:14 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.250.26.52, 195.250.26.52, 195.250.26.52, 195.250.26.52" 195.250.26.52 - _uid=0100007F3A78696A8BF0B71F023F1103 - 200 BYPASS - - [29/Jul/2026:03:49:15 +0000] "POST /wp-login.php HTTP/1.1" 2805 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.250.26.52, 195.250.26.52, 195.250.26.52, 195.250.26.52" 194.5.48.213 - - - 403 BYPASS - - [29/Jul/2026:03:49:58 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.213, 194.5.48.213, 194.5.48.213, 194.5.48.213" 194.5.48.210 - - - 403 BYPASS - - [29/Jul/2026:03:49:59 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.210, 194.5.48.210, 194.5.48.210, 194.5.48.210" 194.5.48.219 - - - 403 BYPASS - - [29/Jul/2026:03:49:59 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.219, 194.5.48.219, 194.5.48.219, 194.5.48.219" 57.141.0.63 - - - 200 BYPASS - - [29/Jul/2026:03:54:42 +0000] "GET /sitemap_index.xml HTTP/1.1" 225 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" "57.141.0.63, 57.141.0.63, 57.141.0.63, 57.141.0.63" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:04:04:00 +0000] "POST /wp-cron.php?doing_wp_cron=1785297840.3434100151062011718750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 52.212.4.38 - - - 200 BYPASS - - [29/Jul/2026:04:04:01 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "52.212.4.38, 52.212.4.38, 52.212.4.38, 52.212.4.38" 52.212.4.38 - _uid=0100007FB17B696A8BF0B71F02A31203 - 200 BYPASS - - [29/Jul/2026:04:04:02 +0000] "POST /wp-login.php HTTP/1.1" 2802 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "52.212.4.38, 52.212.4.38, 52.212.4.38, 52.212.4.38" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:04:06:08 +0000] "POST /wp-cron.php?doing_wp_cron=1785297967.8491289615631103515625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 198.38.94.17 - - - 200 BYPASS - - [29/Jul/2026:04:06:08 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17, 198.38.94.17, 198.38.94.17, 198.38.94.17" 198.38.94.17 - _uid=0100007F307C696A8BF0B71F02C51203 - 200 BYPASS - - [29/Jul/2026:04:06:09 +0000] "POST /wp-login.php HTTP/1.1" 2802 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17, 198.38.94.17, 198.38.94.17, 198.38.94.17" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:04:08:05 +0000] "POST /wp-cron.php?doing_wp_cron=1785298084.5429780483245849609375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:04:08:05 +0000] "POST /wp-cron.php?doing_wp_cron=1785298085.2053029537200927734375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:04:08:06 +0000] "POST /wp-cron.php?doing_wp_cron=1785298086.1194529533386230468750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 43.153.35.128 - - - 500 MISS - - [29/Jul/2026:04:08:06 +0000] "GET / HTTP/1.1" 3573 "http://redlighthealthbenefits.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "43.153.35.128, 43.153.35.128, 43.153.35.128, 43.153.35.128" 45.90.123.233 - - - 200 BYPASS - - [29/Jul/2026:04:08:16 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "45.90.123.233, 45.90.123.233, 45.90.123.233, 45.90.123.233" 45.90.123.233 - _uid=0100007FB07C696A8BF0B71F02E11203 - 200 BYPASS - - [29/Jul/2026:04:08:17 +0000] "POST /wp-login.php HTTP/1.1" 2805 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "45.90.123.233, 45.90.123.233, 45.90.123.233, 45.90.123.233" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:04:14:46 +0000] "POST /wp-cron.php?doing_wp_cron=1785298486.3578600883483886718750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 160.191.139.115 - - - 200 BYPASS - - [29/Jul/2026:04:14:47 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "160.191.139.115, 160.191.139.115, 160.191.139.115, 160.191.139.115" 160.191.139.115 - _uid=0100007F377E696A8BF0B71F021D1303 - 200 BYPASS - - [29/Jul/2026:04:14:48 +0000] "POST /wp-login.php HTTP/1.1" 2805 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "160.191.139.115, 160.191.139.115, 160.191.139.115, 160.191.139.115" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:04:15:57 +0000] "POST /wp-cron.php?doing_wp_cron=1785298557.1014449596405029296875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 94.154.43.229 - - - 500 MISS - - [29/Jul/2026:04:15:57 +0000] "GET / HTTP/1.1" 3573 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" "94.154.43.229, 94.154.43.229, 94.154.43.229, 94.154.43.229" 216.73.216.14 - _uid=0100007FB2C7686A6022FC3A02C59A03 - 200 HIT - - [29/Jul/2026:04:19:32 +0000] "GET /sitemap_index.xml HTTP/1.1" 1159 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "216.73.216.14, 216.73.216.14, 216.73.216.14, 216.73.216.14" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:04:25:56 +0000] "POST /wp-cron.php?doing_wp_cron=1785299155.8401288986206054687500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 135.148.171.117 - - - 200 BYPASS - - [29/Jul/2026:04:25:56 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 135.148.171.117 - _uid=0100007FD480696A8BF0B71F02FD1303 - 200 BYPASS - - [29/Jul/2026:04:25:57 +0000] "POST /wp-login.php HTTP/1.1" 2802 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:04:39:10 +0000] "POST /wp-cron.php?doing_wp_cron=1785299949.6630370616912841796875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 212.47.234.60 - - - 500 MISS - - [29/Jul/2026:04:39:10 +0000] "GET / HTTP/1.1" 3573 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" "212.47.234.60, 212.47.234.60, 212.47.234.60, 212.47.234.60" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:04:47:43 +0000] "POST /wp-cron.php?doing_wp_cron=1785300462.8740820884704589843750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 102.134.101.35 - - - 200 BYPASS - - [29/Jul/2026:04:47:43 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "102.134.101.35, 102.134.101.35, 102.134.101.35, 102.134.101.35" 102.134.101.35 - _uid=0100007FEF85696A92F0672002AD0603 - 200 BYPASS - - [29/Jul/2026:04:47:44 +0000] "POST /wp-login.php HTTP/1.1" 2802 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "102.134.101.35, 102.134.101.35, 102.134.101.35, 102.134.101.35" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:04:50:31 +0000] "POST /wp-cron.php?doing_wp_cron=1785300630.5765089988708496093750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 89.185.225.24 - - - 200 BYPASS - - [29/Jul/2026:04:50:31 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "89.185.225.24, 89.185.225.24, 89.185.225.24, 89.185.225.24" 89.185.225.24 - _uid=0100007F9786696A92F0672002AE0603 - 200 BYPASS - - [29/Jul/2026:04:50:32 +0000] "POST /wp-login.php HTTP/1.1" 2802 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "89.185.225.24, 89.185.225.24, 89.185.225.24, 89.185.225.24" 192.36.172.171 - - - 500 MISS - - [29/Jul/2026:04:50:55 +0000] "GET / HTTP/1.1" 3573 "http://redlighthealthbenefits.com/" "Mozilla/5.0 (Android 14; Mobile; rv:123.0) Gecko/123.0 Firefox/123" "192.36.172.171, 192.36.172.171, 192.36.172.171, 192.36.172.171" 208.109.9.173 - - - 200 BYPASS - - [29/Jul/2026:04:51:24 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "208.109.9.173, 208.109.9.173, 208.109.9.173, 208.109.9.173" 208.109.9.173 - _uid=0100007FCC86696A8BF0B71F02A31503 - 200 BYPASS - - [29/Jul/2026:04:51:25 +0000] "POST /wp-login.php HTTP/1.1" 2805 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "208.109.9.173, 208.109.9.173, 208.109.9.173, 208.109.9.173" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:04:57:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785301077.4866359233856201171875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 43.134.94.96 - - - 500 MISS - - [29/Jul/2026:04:57:58 +0000] "GET / HTTP/1.1" 3573 "https://www.redlighthealthbenefits.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "43.134.94.96, 43.134.94.96, 43.134.94.96, 43.134.94.96" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:10:06 +0000] "POST /wp-cron.php?doing_wp_cron=1785301805.8855149745941162109375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 97.74.93.24 - - - 200 BYPASS - - [29/Jul/2026:05:10:06 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "97.74.93.24, 97.74.93.24, 97.74.93.24, 97.74.93.24" 97.74.93.24 - _uid=0100007F2E8B696A8BF0B71F022E1803 - 200 BYPASS - - [29/Jul/2026:05:10:08 +0000] "POST /wp-login.php HTTP/1.1" 2802 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "97.74.93.24, 97.74.93.24, 97.74.93.24, 97.74.93.24" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:14:09 +0000] "POST /wp-cron.php?doing_wp_cron=1785302048.8100900650024414062500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 41.76.213.235 - - - 200 BYPASS - - [29/Jul/2026:05:14:09 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "41.76.213.235, 41.76.213.235, 41.76.213.235, 41.76.213.235" 41.76.213.235 - _uid=0100007F218C696A8BF0B71F02961803 - 200 BYPASS - - [29/Jul/2026:05:14:10 +0000] "POST /wp-login.php HTTP/1.1" 2805 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "41.76.213.235, 41.76.213.235, 41.76.213.235, 41.76.213.235" 216.244.66.226 - - - 200 BYPASS - - [29/Jul/2026:05:18:23 +0000] "GET /2024/01/29/boosting-athletic-performance-red-light-therapys-role-in-muscle-recovery/feed/ HTTP/1.1" 241 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" "216.244.66.226, 216.244.66.226, 216.244.66.226, 216.244.66.226" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:21:27 +0000] "POST /wp-cron.php?doing_wp_cron=1785302486.6770749092102050781250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:21:27 +0000] "POST /wp-cron.php?doing_wp_cron=1785302487.3815200328826904296875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:21:28 +0000] "POST /wp-cron.php?doing_wp_cron=1785302488.2705430984497070312500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 157.230.13.33 - - - 500 MISS - - [29/Jul/2026:05:21:28 +0000] "GET / HTTP/1.1" 3573 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" "157.230.13.33, 157.230.13.33, 157.230.13.33, 157.230.13.33" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:39:21 +0000] "POST /wp-cron.php?doing_wp_cron=1785303560.8021121025085449218750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 20.89.83.228 - - - 200 BYPASS - - [29/Jul/2026:05:39:21 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "20.89.83.228, 20.89.83.228, 20.89.83.228, 20.89.83.228" 20.89.83.228 - _uid=0100007F0992696A8BF0B71F020E1C03 - 200 BYPASS - - [29/Jul/2026:05:39:24 +0000] "POST /wp-login.php HTTP/1.1" 2805 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "20.89.83.228, 20.89.83.228, 20.89.83.228, 20.89.83.228" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:47:38 +0000] "POST /wp-cron.php?doing_wp_cron=1785304058.2992949485778808593750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 198.38.94.17 - - - 200 BYPASS - - [29/Jul/2026:05:47:38 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17, 198.38.94.17, 198.38.94.17, 198.38.94.17" 198.38.94.17 - _uid=0100007FFA93696A8BF0B71F02531D03 - 200 BYPASS - - [29/Jul/2026:05:47:39 +0000] "POST /wp-login.php HTTP/1.1" 2802 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17, 198.38.94.17, 198.38.94.17, 198.38.94.17" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:51:20 +0000] "POST /wp-cron.php?doing_wp_cron=1785304280.2204079627990722656250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:57:13 +0000] "POST /wp-cron.php?doing_wp_cron=1785304632.5201740264892578125000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 192.241.143.148 - - - 200 BYPASS - - [29/Jul/2026:05:57:13 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.241.143.148, 192.241.143.148, 192.241.143.148, 192.241.143.148" 192.241.143.148 - _uid=0100007F3996696A8BF0B71F02011F03 - 200 BYPASS - - [29/Jul/2026:05:57:13 +0000] "POST /wp-login.php HTTP/1.1" 2802 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.241.143.148, 192.241.143.148, 192.241.143.148, 192.241.143.148" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:58:53 +0000] "POST /wp-cron.php?doing_wp_cron=1785304732.9305450916290283203125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 43.228.157.75 - - - 403 BYPASS - - [29/Jul/2026:06:01:44 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 43.228.157.75 - - - 404 BYPASS - - [29/Jul/2026:06:01:44 +0000] "POST /wp-plain.php HTTP/1.1" 376 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 43.228.157.75 - - - 403 BYPASS - - [29/Jul/2026:06:01:44 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 43.228.157.75 - - - 404 MISS - - [29/Jul/2026:06:01:44 +0000] "GET /maypsiey.php?Fox=d3wL7 HTTP/1.1" 492 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:06:01:45 +0000] "POST /wp-cron.php?doing_wp_cron=1785304904.5818688869476318359375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 103.174.51.103 - - - 200 BYPASS - - [29/Jul/2026:06:01:45 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.174.51.103, 103.174.51.103, 103.174.51.103, 103.174.51.103" 43.228.157.75 - - - 403 BYPASS - - [29/Jul/2026:06:01:45 +0000] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 43.228.157.75 - - - 500 BYPASS - - [29/Jul/2026:06:01:47 +0000] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 3392 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:06:01:47 +0000] "POST /wp-cron.php?doing_wp_cron=1785304907.1708140373229980468750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 43.228.157.75 - - - 500 MISS - - [29/Jul/2026:06:01:47 +0000] "GET / HTTP/1.1" 3573 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 103.174.51.103 - _uid=0100007F4997696A8BF0B71F02FB1F03 - 200 BYPASS - - [29/Jul/2026:06:01:48 +0000] "POST /wp-login.php HTTP/1.1" 2805 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.174.51.103, 103.174.51.103, 103.174.51.103, 103.174.51.103" 43.228.157.75 - - - 403 BYPASS - - [29/Jul/2026:06:01:48 +0000] "GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/1.1" 467 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 43.228.157.75 - - - 404 MISS - - [29/Jul/2026:06:01:48 +0000] "GET /plugins/content/apismtp/apismtp.php?test=hello HTTP/1.1" 492 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 43.228.157.75 - - - 500 MISS - - [29/Jul/2026:06:01:49 +0000] "GET /wp-content/plugins/apikey/apikey.php.suspected?test=hello HTTP/1.1" 3390 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 43.228.157.75 - - - 500 BYPASS - - [29/Jul/2026:06:01:49 +0000] "POST /alfacgiapi/perl.alfa HTTP/1.1" 3392 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 43.228.157.75 - - - 500 MISS - - [29/Jul/2026:06:01:52 +0000] "GET /plugins/content/apismtp/apismtp.php.suspected?test=hello HTTP/1.1" 3390 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 154.26.129.62 - - - 200 BYPASS - - [29/Jul/2026:06:02:38 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "154.26.129.62, 154.26.129.62, 154.26.129.62, 154.26.129.62" 154.26.129.62 - _uid=0100007F7E97696A8BF0B71F02502003 - 200 BYPASS - - [29/Jul/2026:06:02:45 +0000] "POST /wp-login.php HTTP/1.1" 2805 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "154.26.129.62, 154.26.129.62, 154.26.129.62, 154.26.129.62" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:06:34:50 +0000] "POST /wp-cron.php?doing_wp_cron=1785306890.3014469146728515625000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 216.73.216.14 - _uid=0100007FB2C7686A6022FC3A02C59A03 - 200 MISS - - [29/Jul/2026:06:34:50 +0000] "GET /sitemap_index.xml HTTP/1.1" 1179 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "216.73.216.14, 216.73.216.14, 216.73.216.14, 216.73.216.14" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:06:44:05 +0000] "POST /wp-cron.php?doing_wp_cron=1785307445.4975869655609130859375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 94.130.11.28 - - - 200 BYPASS - - [29/Jul/2026:06:44:06 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "94.130.11.28, 94.130.11.28, 94.130.11.28, 94.130.11.28" 94.130.11.28 - _uid=0100007F36A1696A92F0672002F10C03 - 200 BYPASS - - [29/Jul/2026:06:44:07 +0000] "POST /wp-login.php HTTP/1.1" 2802 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "94.130.11.28, 94.130.11.28, 94.130.11.28, 94.130.11.28" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:07:02:15 +0000] "POST /wp-cron.php?doing_wp_cron=1785308535.1221508979797363281250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 198.38.94.67 - - - 200 BYPASS - - [29/Jul/2026:07:02:15 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.67, 198.38.94.67, 198.38.94.67, 198.38.94.67" 198.38.94.67 - _uid=0100007F77A5696A8BF0B71F02302B03 - 200 BYPASS - - [29/Jul/2026:07:02:16 +0000] "POST /wp-login.php HTTP/1.1" 2805 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.67, 198.38.94.67, 198.38.94.67, 198.38.94.67" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:07:56 +0000] "GET /test1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 BYPASS - - [29/Jul/2026:07:07:57 +0000] "GET /wp-admin/maint/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 403 BYPASS - - [29/Jul/2026:07:07:57 +0000] "GET /wp-content/uploads/min.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:07:57 +0000] "GET /zoom1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:07:57 +0000] "GET /lock360.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:07:58 +0000] "GET /r.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:07:58 +0000] "GET /sf.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:07:58 +0000] "GET /t.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:07:58 +0000] "GET /7.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:07:59 +0000] "GET /b.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:07:59 +0000] "GET /buy.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:07:59 +0000] "GET /config.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:07:59 +0000] "GET /num.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:00 +0000] "GET /areak1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:00 +0000] "GET /vc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 403 BYPASS - - [29/Jul/2026:07:08:00 +0000] "GET /wp-content/plugins/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:00 +0000] "GET /core.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 403 BYPASS - - [29/Jul/2026:07:08:01 +0000] "GET /wp-admin/css/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 403 BYPASS - - [29/Jul/2026:07:08:01 +0000] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 403 BYPASS - - [29/Jul/2026:07:08:01 +0000] "GET /wp-content/min.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 403 BYPASS - - [29/Jul/2026:07:08:01 +0000] "GET /wp-content/plugins/beteng88/ws83.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:02 +0000] "GET /ws37.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:07:08:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785308882.9793550968170166015625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:07:08:04 +0000] "POST /wp-cron.php?doing_wp_cron=1785308883.5910909175872802734375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:07:08:05 +0000] "POST /wp-cron.php?doing_wp_cron=1785308884.6685791015625000000000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 20.151.107.236 - - - 500 MISS - - [29/Jul/2026:07:08:05 +0000] "GET /assets/ HTTP/1.1" 3390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:05 +0000] "GET /new.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 403 BYPASS - - [29/Jul/2026:07:08:05 +0000] "GET /wp-admin/js/widgets/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:06 +0000] "GET /il.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:06 +0000] "GET /images/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:06 +0000] "GET /lite.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:06 +0000] "GET /load.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 403 BYPASS - - [29/Jul/2026:07:08:06 +0000] "GET /wp-content/themes/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:07 +0000] "GET /wp-themes.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:07 +0000] "GET /xda.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:07 +0000] "GET /.trash7206/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:07 +0000] "GET /doc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:08 +0000] "GET /storage/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:08 +0000] "GET /wp-content.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:08 +0000] "GET /wp-includes/ID3/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 403 BYPASS - - [29/Jul/2026:07:08:08 +0000] "GET /wp-includes/block-bindings/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 403 BYPASS - - [29/Jul/2026:07:08:09 +0000] "GET /wp-includes/images/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 403 BYPASS - - [29/Jul/2026:07:08:09 +0000] "GET /wp-includes/min.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:09 +0000] "GET /cache.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:09 +0000] "GET /filemanager.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:10 +0000] "GET /wp-blog.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 403 BYPASS - - [29/Jul/2026:07:08:10 +0000] "GET /wp-includes/ID3/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 403 BYPASS - - [29/Jul/2026:07:08:10 +0000] "GET /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:10 +0000] "GET /cd.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:11 +0000] "GET /css.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:11 +0000] "GET /lu4.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 BYPASS - - [29/Jul/2026:07:08:11 +0000] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 403 BYPASS - - [29/Jul/2026:07:08:11 +0000] "GET /wp-content/plugins/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 403 BYPASS - - [29/Jul/2026:07:08:12 +0000] "GET /wp-content/upgrade/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:12 +0000] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:12 +0000] "GET /ant.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:12 +0000] "GET /autoload_classmap.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:13 +0000] "GET /storage/rip.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:13 +0000] "GET /tinyfilemanager.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 500 MISS - - [29/Jul/2026:07:08:14 +0000] "GET /wp-includes/bk/ HTTP/1.1" 3390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:14 +0000] "GET /403.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:14 +0000] "GET /av.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:15 +0000] "GET /tool.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 403 BYPASS - - [29/Jul/2026:07:08:15 +0000] "GET /wp-admin/includes/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:07:08:16 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=c3ab40a978 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 20.151.107.236 - - - 302 BYPASS - - [29/Jul/2026:07:08:16 +0000] "GET /wp-admin/index.php HTTP/1.1" 608 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 403 BYPASS - - [29/Jul/2026:07:08:17 +0000] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 403 BYPASS - - [29/Jul/2026:07:08:17 +0000] "GET /wp-content/themes/pridmag/b.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 403 BYPASS - - [29/Jul/2026:07:08:17 +0000] "GET /wp-includes/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:18 +0000] "GET /wp-trackback.php HTTP/1.1" 537 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:18 +0000] "GET /ws.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 500 MISS - - [29/Jul/2026:07:08:19 +0000] "GET /.bod/.ll/ HTTP/1.1" 3390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:20 +0000] "GET /0.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:20 +0000] "GET /1index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:20 +0000] "GET /autoload_classmap/function.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:20 +0000] "GET /dvve.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 403 BYPASS - - [29/Jul/2026:07:08:21 +0000] "GET /wp-includes/PHPMailer/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:21 +0000] "GET /ws77.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:21 +0000] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:21 +0000] "GET /admin/function.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 BYPASS - - [29/Jul/2026:07:08:21 +0000] "GET /wp-admin/css/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 403 BYPASS - - [29/Jul/2026:07:08:22 +0000] "GET /wp-includes/css/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:22 +0000] "GET /xx.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 403 BYPASS - - [29/Jul/2026:07:08:22 +0000] "GET /wp-content/about.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:23 +0000] "GET /wp-includes/assets/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:23 +0000] "GET /wp-the.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:23 +0000] "GET /ws81.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:23 +0000] "GET /3.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:24 +0000] "GET /a1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:24 +0000] "GET /ca5.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:24 +0000] "GET /install.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:24 +0000] "GET /radio.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 403 BYPASS - - [29/Jul/2026:07:08:25 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:25 +0000] "GET /wp-signin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:25 +0000] "GET /Ov-Simple1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:25 +0000] "GET /fm.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:26 +0000] "GET /ftde.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:26 +0000] "GET /hplfuns.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:26 +0000] "GET /log.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:26 +0000] "GET /test.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:27 +0000] "GET /txets.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 404 MISS - - [29/Jul/2026:07:08:27 +0000] "GET /wp-admin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 403 BYPASS - - [29/Jul/2026:07:08:27 +0000] "GET /wp-admin/images/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 302 BYPASS - - [29/Jul/2026:07:08:28 +0000] "GET /wp-admin/network/ HTTP/1.1" 609 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 500 MISS - - [29/Jul/2026:07:08:29 +0000] "GET /wp-config-sample.php HTTP/1.1" 2853 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 403 BYPASS - - [29/Jul/2026:07:08:29 +0000] "GET /wp-content/packed.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 20.151.107.236 - - - 403 BYPASS - - [29/Jul/2026:07:08:29 +0000] "GET /wp-includes/IXR/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.107.236, 20.151.107.236, 20.151.107.236, 20.151.107.236" 194.5.48.114 - - - 403 BYPASS - - [29/Jul/2026:07:11:22 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.114, 194.5.48.114, 194.5.48.114, 194.5.48.114" 194.5.48.114 - - - 403 BYPASS - - [29/Jul/2026:07:11:23 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.114, 194.5.48.114, 194.5.48.114, 194.5.48.114" 194.5.48.115 - - - 403 BYPASS - - [29/Jul/2026:07:11:25 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.115, 194.5.48.115, 194.5.48.115, 194.5.48.115" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:07:14:17 +0000] "POST /wp-cron.php?doing_wp_cron=1785309257.0085830688476562500000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 198.38.94.87 - - - 200 BYPASS - - [29/Jul/2026:07:14:17 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.87, 198.38.94.87, 198.38.94.87, 198.38.94.87" 198.38.94.87 - _uid=0100007F49A8696A8BF0B71F02302D03 - 200 BYPASS - - [29/Jul/2026:07:14:18 +0000] "POST /wp-login.php HTTP/1.1" 2805 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.87, 198.38.94.87, 198.38.94.87, 198.38.94.87" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:07:15:25 +0000] "POST /wp-cron.php?doing_wp_cron=1785309325.1546299457550048828125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 209.38.221.42 - - - 200 BYPASS - - [29/Jul/2026:07:15:25 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "209.38.221.42, 209.38.221.42, 209.38.221.42, 209.38.221.42" 209.38.221.42 - _uid=0100007F8DA8696A8BF0B71F025D2D03 - 200 BYPASS - - [29/Jul/2026:07:15:26 +0000] "POST /wp-login.php HTTP/1.1" 2805 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "209.38.221.42, 209.38.221.42, 209.38.221.42, 209.38.221.42" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:07:27:19 +0000] "POST /wp-cron.php?doing_wp_cron=1785310039.2645199298858642578125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 198.38.94.17 - - - 200 BYPASS - - [29/Jul/2026:07:27:19 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17, 198.38.94.17, 198.38.94.17, 198.38.94.17" 198.38.94.17 - _uid=0100007F57AB696A8BF0B71F02A62F03 - 200 BYPASS - - [29/Jul/2026:07:27:20 +0000] "POST /wp-login.php HTTP/1.1" 2805 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17, 198.38.94.17, 198.38.94.17, 198.38.94.17" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:07:31:39 +0000] "POST /wp-cron.php?doing_wp_cron=1785310298.6495590209960937500000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 195.250.23.54 - - - 200 BYPASS - - [29/Jul/2026:07:31:39 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.250.23.54, 195.250.23.54, 195.250.23.54, 195.250.23.54" 195.250.23.54 - _uid=0100007F5BAC696A92F0672002771203 - 200 BYPASS - - [29/Jul/2026:07:31:40 +0000] "POST /wp-login.php HTTP/1.1" 2802 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.250.23.54, 195.250.23.54, 195.250.23.54, 195.250.23.54" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:07:35:34 +0000] "POST /wp-cron.php?doing_wp_cron=1785310533.9376280307769775390625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 103.133.216.219 - - - 200 BYPASS - - [29/Jul/2026:07:35:34 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.133.216.219, 103.133.216.219, 103.133.216.219, 103.133.216.219" 103.133.216.219 - _uid=0100007F46AD696A92F0672002E91203 - 200 BYPASS - - [29/Jul/2026:07:35:36 +0000] "POST /wp-login.php HTTP/1.1" 2805 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.133.216.219, 103.133.216.219, 103.133.216.219, 103.133.216.219" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:07:38:39 +0000] "POST /wp-cron.php?doing_wp_cron=1785310719.2206940650939941406250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:07:58:01 +0000] "POST /wp-cron.php?doing_wp_cron=1785311881.0646660327911376953125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 103.133.216.219 - - - 200 BYPASS - - [29/Jul/2026:07:58:01 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.133.216.219, 103.133.216.219, 103.133.216.219, 103.133.216.219" 103.133.216.219 - _uid=0100007F89B2696A8BF0B71F02B93703 - 200 BYPASS - - [29/Jul/2026:07:58:03 +0000] "POST /wp-login.php HTTP/1.1" 2805 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.133.216.219, 103.133.216.219, 103.133.216.219, 103.133.216.219" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:08:10:39 +0000] "POST /wp-cron.php?doing_wp_cron=1785312639.3638610839843750000000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 190.92.174.131 - - - 200 BYPASS - - [29/Jul/2026:08:10:40 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "190.92.174.131, 190.92.174.131, 190.92.174.131, 190.92.174.131" 190.92.174.131 - _uid=0100007F80B5696A8BF0B71F02E73F03 - 200 BYPASS - - [29/Jul/2026:08:10:41 +0000] "POST /wp-login.php HTTP/1.1" 2802 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "190.92.174.131, 190.92.174.131, 190.92.174.131, 190.92.174.131" 194.5.48.164 - - - 403 BYPASS - - [29/Jul/2026:08:15:23 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.164, 194.5.48.164, 194.5.48.164, 194.5.48.164" 194.5.48.170 - - - 403 BYPASS - - [29/Jul/2026:08:15:23 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.170, 194.5.48.170, 194.5.48.170, 194.5.48.170" 194.5.48.170 - - - 403 BYPASS - - [29/Jul/2026:08:15:23 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.170, 194.5.48.170, 194.5.48.170, 194.5.48.170" 216.73.216.14 - _uid=0100007FB2C7686A6022FC3A02C59A03 - 200 HIT - - [29/Jul/2026:08:15:47 +0000] "GET /sitemap_index.xml HTTP/1.1" 1159 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "216.73.216.14, 216.73.216.14, 216.73.216.14, 216.73.216.14" 57.141.0.27 - - - 200 BYPASS - - [29/Jul/2026:08:15:56 +0000] "GET /post-sitemap.xml HTTP/1.1" 225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" "57.141.0.27, 57.141.0.27, 57.141.0.27, 57.141.0.27" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:08:41:23 +0000] "POST /wp-cron.php?doing_wp_cron=1785314482.7235429286956787109375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 192.250.227.35 - - - 200 BYPASS - - [29/Jul/2026:08:41:23 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.250.227.35, 192.250.227.35, 192.250.227.35, 192.250.227.35" 192.250.227.35 - _uid=0100007FB3BC696A92F0672002E12603 - 200 BYPASS - - [29/Jul/2026:08:41:24 +0000] "POST /wp-login.php HTTP/1.1" 2802 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.250.227.35, 192.250.227.35, 192.250.227.35, 192.250.227.35" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:08:44:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785314642.4620320796966552734375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:08:44:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785314643.1899650096893310546875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:08:44:04 +0000] "POST /wp-cron.php?doing_wp_cron=1785314644.1770589351654052734375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 43.157.188.74 - - - 500 MISS - - [29/Jul/2026:08:44:04 +0000] "GET / HTTP/1.1" 3573 "http://redlighthealthbenefits.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "43.157.188.74, 43.157.188.74, 43.157.188.74, 43.157.188.74" 113.160.142.119 - - - 200 BYPASS - - [29/Jul/2026:08:44:20 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "113.160.142.119, 113.160.142.119, 113.160.142.119, 113.160.142.119" 113.160.142.119 - _uid=0100007F64BD696A8BF0B71F02735A03 - 200 BYPASS - - [29/Jul/2026:08:44:21 +0000] "POST /wp-login.php HTTP/1.1" 2805 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "113.160.142.119, 113.160.142.119, 113.160.142.119, 113.160.142.119" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:09:11:55 +0000] "POST /wp-cron.php?doing_wp_cron=1785316315.2895989418029785156250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 202.51.202.242 - - - 200 BYPASS - - [29/Jul/2026:09:11:55 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "202.51.202.242, 202.51.202.242, 202.51.202.242, 202.51.202.242" 202.51.202.242 - _uid=0100007FDBC3696A8BF0B71F02556403 - 200 BYPASS - - [29/Jul/2026:09:12:11 +0000] "POST /wp-login.php HTTP/1.1" 2805 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "202.51.202.242, 202.51.202.242, 202.51.202.242, 202.51.202.242" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:09:13:06 +0000] "POST /wp-cron.php?doing_wp_cron=1785316385.8249011039733886718750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 107.189.14.87 - - - 500 BYPASS - - [29/Jul/2026:09:13:06 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 3234 "-" "wp2shell_v2" "107.189.14.87, 107.189.14.87, 107.189.14.87, 107.189.14.87" 107.189.14.87 - - - 500 BYPASS - - [29/Jul/2026:09:13:07 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 3234 "-" "wp2shell_v2" "107.189.14.87, 107.189.14.87, 107.189.14.87, 107.189.14.87" 107.189.14.87 - - - 500 BYPASS - - [29/Jul/2026:09:13:08 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 3234 "-" "wp2shell_v2" "107.189.14.87, 107.189.14.87, 107.189.14.87, 107.189.14.87" 4.184.60.71 - - - 403 BYPASS - - [29/Jul/2026:09:15:49 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 385 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - - - 404 MISS - - [29/Jul/2026:09:15:51 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 433 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FA037696A5D222E3B02433203 - 404 MISS - - [29/Jul/2026:09:15:56 +0000] "GET /nothing2.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FA037696A5D222E3B02433203 - 404 MISS - - [29/Jul/2026:09:16:03 +0000] "GET /wkl.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FA037696A5D222E3B02433203 - 404 MISS - - [29/Jul/2026:09:16:06 +0000] "GET /ls.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FA037696A5D222E3B02433203 - 404 MISS - - [29/Jul/2026:09:16:15 +0000] "GET /error.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - - - 404 MISS - - [29/Jul/2026:09:16:19 +0000] "GET /wpo.php HTTP/1.1" 433 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE3C4696A8BF0B71F02FF6403 - 404 MISS - - [29/Jul/2026:09:16:23 +0000] "GET /shellalfa.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE3C4696A8BF0B71F02FF6403 - 404 MISS - - [29/Jul/2026:09:16:34 +0000] "GET /simple.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE3C4696A8BF0B71F02FF6403 - 404 MISS - - [29/Jul/2026:09:16:37 +0000] "GET /8.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:09:16:38 +0000] "POST /wp-cron.php?doing_wp_cron=1785316597.6438920497894287109375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 162.14.114.97 - - - 500 MISS - - [29/Jul/2026:09:16:38 +0000] "GET / HTTP/1.1" 3573 "https://www.redlighthealthbenefits.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "162.14.114.97, 162.14.114.97, 162.14.114.97, 162.14.114.97" 4.184.60.71 - _uid=0100007FE3C4696A8BF0B71F02FF6403 - 404 BYPASS - - [29/Jul/2026:09:16:38 +0000] "GET /wp-admin/maint/index.php HTTP/1.1" 299 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE3C4696A8BF0B71F02FF6403 - 404 MISS - - [29/Jul/2026:09:16:39 +0000] "GET /n.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE3C4696A8BF0B71F02FF6403 - 404 MISS - - [29/Jul/2026:09:16:42 +0000] "GET /s.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FF214696A5D222E3B02E32C03 - 404 MISS - - [29/Jul/2026:09:16:44 +0000] "GET /cong.php?p= HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 114.119.159.62 - - - 200 BYPASS - - [29/Jul/2026:09:16:50 +0000] "GET /2024/01/29/illuminating-cardiovascular-health-the-impact-of-red-light-therapy/ HTTP/1.1" 241 "https://redlighthealthbenefits.com/2024/01/29/illuminating-cardiovascular-health-the-impact-of-red-light-therapy/" "Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (HTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" "114.119.159.62, 114.119.159.62, 114.119.159.62, 114.119.159.62" 4.184.60.71 - _uid=0100007FF214696A5D222E3B02E32C03 - 404 MISS - - [29/Jul/2026:09:17:39 +0000] "GET /ee.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FCEC4686A6022FC3A02929703 - 404 MISS - - [29/Jul/2026:09:17:41 +0000] "GET /6.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FCEC4686A6022FC3A02929703 - 404 MISS - - [29/Jul/2026:09:17:44 +0000] "GET /system_log.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE78D686A6022FC3A02B37003 - 404 MISS - - [29/Jul/2026:09:17:45 +0000] "GET /ab.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - - - 404 HIT - - [29/Jul/2026:09:17:47 +0000] "GET /lock360.php HTTP/1.1" 491 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FCDA6696A92F06720027F0F03 - 404 MISS - - [29/Jul/2026:09:17:48 +0000] "GET /about.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FCDA6696A92F06720027F0F03 - 404 MISS - - [29/Jul/2026:09:17:51 +0000] "GET /222.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FCDA6696A92F06720027F0F03 - 404 MISS - - [29/Jul/2026:09:17:55 +0000] "GET /abcd.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6E23696A6022FC3A0248E103 - 404 MISS - - [29/Jul/2026:09:18:02 +0000] "GET /gifclass.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FEC8D686A5D222E3B02141803 - 404 MISS - - [29/Jul/2026:09:18:17 +0000] "GET /enclas.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FEC8D686A5D222E3B02141803 - 404 MISS - - [29/Jul/2026:09:18:19 +0000] "GET /alfa.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F5E23696A6022FC3A0215E103 - 404 MISS - - [29/Jul/2026:09:18:20 +0000] "GET /we.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - - - 404 MISS - - [29/Jul/2026:09:18:22 +0000] "GET /fe5.php HTTP/1.1" 433 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - - - 404 MISS - - [29/Jul/2026:09:18:24 +0000] "GET /tgrs.php HTTP/1.1" 433 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F60C5696A8BF0B71F025D6503 - 404 MISS - - [29/Jul/2026:09:18:27 +0000] "GET /ut.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F60C5696A8BF0B71F025D6503 - 404 MISS - - [29/Jul/2026:09:18:29 +0000] "GET /a3.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F60C5696A8BF0B71F025D6503 - 404 MISS - - [29/Jul/2026:09:18:30 +0000] "GET /aa.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6B23696A6022FC3A023FE103 - 404 MISS - - [29/Jul/2026:09:18:32 +0000] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FD8C4686A6022FC3A02AC9703 - 404 HIT - - [29/Jul/2026:09:18:34 +0000] "GET /3.php HTTP/1.1" 403 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE7A6696A92F06720029C0F03 - 404 MISS - - [29/Jul/2026:09:18:37 +0000] "GET /f6.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE7A6696A92F06720029C0F03 - 404 HIT - - [29/Jul/2026:09:18:39 +0000] "GET /fm.php HTTP/1.1" 403 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE9A6696A8BF0B71F02602C03 - 404 MISS - - [29/Jul/2026:09:18:41 +0000] "GET /rrr.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE9A6696A8BF0B71F02602C03 - 404 MISS - - [29/Jul/2026:09:18:44 +0000] "GET /usep.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE9A6696A8BF0B71F02602C03 - 404 MISS - - [29/Jul/2026:09:18:45 +0000] "GET /fm.php?p= HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE9A6696A8BF0B71F02602C03 - 404 MISS - - [29/Jul/2026:09:18:49 +0000] "GET /0x.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - - - 404 MISS - - [29/Jul/2026:09:18:50 +0000] "GET /goat.php HTTP/1.1" 433 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - - - 404 MISS - - [29/Jul/2026:09:18:54 +0000] "GET /123.php HTTP/1.1" 433 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE514696A6022FC3A0292D603 - 404 MISS - - [29/Jul/2026:09:18:55 +0000] "GET /ioxi-o.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F5D23696A5D222E3B02362F03 - 404 MISS - - [29/Jul/2026:09:19:05 +0000] "GET /taktak.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F60C5696A8BF0B71F025D6503 - 404 MISS - - [29/Jul/2026:09:19:20 +0000] "GET /gt.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F60C5696A8BF0B71F025D6503 - 404 MISS - - [29/Jul/2026:09:19:22 +0000] "GET /aghbvr.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F60C5696A8BF0B71F025D6503 - 404 MISS - - [29/Jul/2026:09:19:24 +0000] "GET /miso.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F60C5696A8BF0B71F025D6503 - 404 MISS - - [29/Jul/2026:09:19:26 +0000] "GET /naxc.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F60C5696A8BF0B71F025D6503 - 404 MISS - - [29/Jul/2026:09:19:30 +0000] "GET /fex.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F60C5696A8BF0B71F025D6503 - 404 MISS - - [29/Jul/2026:09:19:32 +0000] "GET /taff.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F60C5696A8BF0B71F025D6503 - 404 MISS - - [29/Jul/2026:09:19:33 +0000] "GET /bless11.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F60C5696A8BF0B71F025D6503 - 404 MISS - - [29/Jul/2026:09:19:42 +0000] "GET /aj.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - - - 404 MISS - - [29/Jul/2026:09:19:46 +0000] "GET /opts.php HTTP/1.1" 433 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FB2C5696A8BF0B71F028F6503 - 404 HIT - - [29/Jul/2026:09:19:50 +0000] "GET /wpo.php HTTP/1.1" 344 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE3C4696A8BF0B71F02FF6403 - 404 MISS - - [29/Jul/2026:09:19:56 +0000] "GET /filer.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE3C4696A8BF0B71F02FF6403 - 404 HIT - - [29/Jul/2026:09:19:58 +0000] "GET /enclas.php HTTP/1.1" 344 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE3C4696A8BF0B71F02FF6403 - 404 MISS - - [29/Jul/2026:09:20:03 +0000] "GET /en0.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE3C4696A8BF0B71F02FF6403 - 404 MISS - - [29/Jul/2026:09:20:04 +0000] "GET /kaza.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE3C4696A8BF0B71F02FF6403 - 404 MISS - - [29/Jul/2026:09:20:08 +0000] "GET /wsd.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE3C4696A8BF0B71F02FF6403 - 404 MISS - - [29/Jul/2026:09:20:24 +0000] "GET /info.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6723696A6022FC3A0234E103 - 404 MISS - - [29/Jul/2026:09:20:36 +0000] "GET /333.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6723696A6022FC3A0234E103 - 404 MISS - - [29/Jul/2026:09:20:42 +0000] "GET /cfile.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6723696A6022FC3A0234E103 - 404 MISS - - [29/Jul/2026:09:20:48 +0000] "GET /bless3.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6723696A6022FC3A0234E103 - 404 MISS - - [29/Jul/2026:09:21:14 +0000] "GET /doti.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6723696A6022FC3A0234E103 - 404 MISS - - [29/Jul/2026:09:21:23 +0000] "GET /031.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6723696A6022FC3A0234E103 - 404 MISS - - [29/Jul/2026:09:21:29 +0000] "GET /wfile.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6723696A6022FC3A0234E103 - 404 MISS - - [29/Jul/2026:09:21:31 +0000] "GET /lala.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6723696A6022FC3A0234E103 - 404 MISS - - [29/Jul/2026:09:21:32 +0000] "GET /mac.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FA837696A6022FC3A024AEF03 - 404 MISS - - [29/Jul/2026:09:21:37 +0000] "GET /he.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FA837696A6022FC3A024AEF03 - 404 MISS - - [29/Jul/2026:09:21:40 +0000] "GET /plss3.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FA837696A6022FC3A024AEF03 - 404 MISS - - [29/Jul/2026:09:21:43 +0000] "GET /ton.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FA837696A6022FC3A024AEF03 - 404 MISS - - [29/Jul/2026:09:21:45 +0000] "GET /33.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FA837696A6022FC3A024AEF03 - 404 MISS - - [29/Jul/2026:09:21:47 +0000] "GET /nfile.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FA837696A6022FC3A024AEF03 - 404 MISS - - [29/Jul/2026:09:21:49 +0000] "GET /ffile.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FA837696A6022FC3A024AEF03 - 404 MISS - - [29/Jul/2026:09:21:52 +0000] "GET /file18.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FA837696A6022FC3A024AEF03 - 404 MISS - - [29/Jul/2026:09:21:54 +0000] "GET /file21.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FA837696A6022FC3A024AEF03 - 404 MISS - - [29/Jul/2026:09:21:55 +0000] "GET /yellow.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FA837696A6022FC3A024AEF03 - 404 MISS - - [29/Jul/2026:09:21:58 +0000] "GET /file1.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - - - 404 MISS - - [29/Jul/2026:09:22:00 +0000] "GET /geck.php HTTP/1.1" 433 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - - - 404 MISS - - [29/Jul/2026:09:22:05 +0000] "GET /file4.php HTTP/1.1" 433 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FCBB1686A6022FC3A02B18203 - 404 MISS - - [29/Jul/2026:09:22:08 +0000] "GET /file88.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FCBB1686A6022FC3A02B18203 - 404 HIT - - [29/Jul/2026:09:22:09 +0000] "GET /7.php HTTP/1.1" 403 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FCEA6696A8BF0B71F020D2C03 - 404 MISS - - [29/Jul/2026:09:22:16 +0000] "GET /size.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - - - 404 MISS - - [29/Jul/2026:09:22:21 +0000] "GET /bolt.php HTTP/1.1" 433 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6C23696A6022FC3A0242E103 - 404 MISS - - [29/Jul/2026:09:22:23 +0000] "GET /file8.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6C23696A6022FC3A0242E103 - 404 MISS - - [29/Jul/2026:09:22:25 +0000] "GET /file2.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE08D686A6022FC3A02A27003 - 404 MISS - - [29/Jul/2026:09:22:26 +0000] "GET /vee.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE08D686A6022FC3A02A27003 - 404 MISS - - [29/Jul/2026:09:22:29 +0000] "GET /a2.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE08D686A6022FC3A02A27003 - 404 MISS - - [29/Jul/2026:09:22:31 +0000] "GET /xxa.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE08D686A6022FC3A02A27003 - 404 MISS - - [29/Jul/2026:09:22:34 +0000] "GET /mlex.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE08D686A6022FC3A02A27003 - 404 MISS - - [29/Jul/2026:09:22:38 +0000] "GET /030.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE08D686A6022FC3A02A27003 - 404 MISS - - [29/Jul/2026:09:22:41 +0000] "GET /haa.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE08D686A6022FC3A02A27003 - 404 MISS - - [29/Jul/2026:09:22:44 +0000] "GET /xsox.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE08D686A6022FC3A02A27003 - 404 MISS - - [29/Jul/2026:09:22:46 +0000] "GET /classgoto24.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE08D686A6022FC3A02A27003 - 404 MISS - - [29/Jul/2026:09:22:50 +0000] "GET /inde.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE08D686A6022FC3A02A27003 - 404 MISS - - [29/Jul/2026:09:22:51 +0000] "GET /akk.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE08D686A6022FC3A02A27003 - 404 MISS - - [29/Jul/2026:09:22:54 +0000] "GET /alpa.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE08D686A6022FC3A02A27003 - 404 MISS - - [29/Jul/2026:09:22:57 +0000] "GET /finny.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE08D686A6022FC3A02A27003 - 404 MISS - - [29/Jul/2026:09:22:59 +0000] "GET /file15.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - - - 404 MISS - - [29/Jul/2026:09:23:01 +0000] "GET /0x0x.php HTTP/1.1" 433 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F75C6696A92F0672002512E03 - 404 MISS - - [29/Jul/2026:09:23:02 +0000] "GET /2clas.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F75C6696A92F0672002512E03 - 404 MISS - - [29/Jul/2026:09:23:04 +0000] "GET /file9.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F75C6696A92F0672002512E03 - 404 MISS - - [29/Jul/2026:09:23:05 +0000] "GET /aaa.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6E23696A6022FC3A0247E103 - 403 BYPASS - - [29/Jul/2026:09:23:07 +0000] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 297 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6E23696A6022FC3A0247E103 - 403 BYPASS - - [29/Jul/2026:09:23:08 +0000] "GET /wp-admin/js/ HTTP/1.1" 297 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6E23696A6022FC3A0247E103 - 403 BYPASS - - [29/Jul/2026:09:23:10 +0000] "GET /wp-admin/css/ HTTP/1.1" 297 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6E23696A6022FC3A0247E103 - 403 BYPASS - - [29/Jul/2026:09:23:12 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 297 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6E23696A6022FC3A0247E103 - 404 MISS - - [29/Jul/2026:09:23:16 +0000] "GET /pucci.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6E23696A6022FC3A0247E103 - 403 BYPASS - - [29/Jul/2026:09:23:18 +0000] "GET /wp-includes/blocks/details/ HTTP/1.1" 297 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6E23696A6022FC3A0247E103 - 403 BYPASS - - [29/Jul/2026:09:23:19 +0000] "GET /wp-includes/blocks/audio/ HTTP/1.1" 297 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6E23696A6022FC3A0247E103 - 404 MISS - - [29/Jul/2026:09:23:20 +0000] "GET /100.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6E23696A6022FC3A0247E103 - 403 BYPASS - - [29/Jul/2026:09:23:23 +0000] "GET //wp-includes/l10n/ HTTP/1.1" 297 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6E23696A6022FC3A0247E103 - 403 BYPASS - - [29/Jul/2026:09:23:24 +0000] "GET /wp-content/uploads/ HTTP/1.1" 297 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6E23696A6022FC3A0247E103 - 404 MISS - - [29/Jul/2026:09:23:27 +0000] "GET //cgi-bin/index.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6E23696A6022FC3A0247E103 - 403 BYPASS - - [29/Jul/2026:09:23:32 +0000] "GET //wp-includes/css/dist/ HTTP/1.1" 297 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6E23696A6022FC3A0247E103 - 404 MISS - - [29/Jul/2026:09:23:35 +0000] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php?p= HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - - - 404 MISS - - [29/Jul/2026:09:23:48 +0000] "GET /ilex.php HTTP/1.1" 433 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FA4C6696A8BF0B71F02126603 - 404 MISS - - [29/Jul/2026:09:23:50 +0000] "GET /tor.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FA4C6696A8BF0B71F02126603 - 404 MISS - - [29/Jul/2026:09:23:53 +0000] "GET /klex.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FA4C6696A8BF0B71F02126603 - 404 MISS - - [29/Jul/2026:09:23:55 +0000] "GET /shell1.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FA4C6696A8BF0B71F02126603 - 404 MISS - - [29/Jul/2026:09:24:08 +0000] "GET /sec.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - - - 404 MISS - - [29/Jul/2026:09:24:09 +0000] "GET /filesss.php HTTP/1.1" 433 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FB9C6696A8BF0B71F02266603 - 404 MISS - - [29/Jul/2026:09:24:10 +0000] "GET /ea.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FB9C6696A8BF0B71F02266603 - 404 MISS - - [29/Jul/2026:09:24:16 +0000] "GET /gi.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FB9C6696A8BF0B71F02266603 - 404 MISS - - [29/Jul/2026:09:24:18 +0000] "GET /10.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FB9C6696A8BF0B71F02266603 - 404 MISS - - [29/Jul/2026:09:24:21 +0000] "GET /11.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - - - 404 MISS - - [29/Jul/2026:09:24:23 +0000] "GET /12.php HTTP/1.1" 433 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE2C4686A6022FC3A02C69703 - 404 MISS - - [29/Jul/2026:09:24:29 +0000] "GET /13.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FC4C4686A6022FC3A026B9703 - 404 MISS - - [29/Jul/2026:09:24:33 +0000] "GET /hi.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FC4C4686A6022FC3A026B9703 - 404 MISS - - [29/Jul/2026:09:24:35 +0000] "GET /v.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FD7C4686A6022FC3A02A79703 - 404 MISS - - [29/Jul/2026:09:24:39 +0000] "GET /ar.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FD7C4686A6022FC3A02A79703 - 404 MISS - - [29/Jul/2026:09:24:40 +0000] "GET /chosen.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6823696A6022FC3A0237E103 - 404 MISS - - [29/Jul/2026:09:24:41 +0000] "GET /155.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6323696A6022FC3A0227E103 - 404 MISS - - [29/Jul/2026:09:24:42 +0000] "GET /ppp.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - - - 404 MISS - - [29/Jul/2026:09:24:43 +0000] "GET /201.php HTTP/1.1" 433 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - - - 404 HIT - - [29/Jul/2026:09:24:44 +0000] "GET /install.php HTTP/1.1" 491 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE8A6696A8BF0B71F025B2C03 - 404 MISS - - [29/Jul/2026:09:24:45 +0000] "GET /max.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE8A6696A8BF0B71F025B2C03 - 404 MISS - - [29/Jul/2026:09:24:47 +0000] "GET /1.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE8A6696A8BF0B71F025B2C03 - 404 MISS - - [29/Jul/2026:09:24:49 +0000] "GET /bak.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE1C4686A5D222E3B02F31E03 - 404 MISS - - [29/Jul/2026:09:24:52 +0000] "GET /ini.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE2C4686A6022FC3A02C89703 - 404 MISS - - [29/Jul/2026:09:24:53 +0000] "GET /mail.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - - - 404 MISS - - [29/Jul/2026:09:24:56 +0000] "GET /dlu.php HTTP/1.1" 433 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE8C6696A92F0672002932E03 - 404 MISS - - [29/Jul/2026:09:24:59 +0000] "GET /zde.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE8C6696A92F0672002932E03 - 404 MISS - - [29/Jul/2026:09:25:01 +0000] "GET /ifm.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE8C6696A92F0672002932E03 - 404 MISS - - [29/Jul/2026:09:25:03 +0000] "GET /redi.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE8C6696A92F0672002932E03 - 404 MISS - - [29/Jul/2026:09:25:05 +0000] "GET /fns.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE8C6696A92F0672002932E03 - 404 MISS - - [29/Jul/2026:09:25:09 +0000] "GET /pent.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE8C6696A92F0672002932E03 - 404 MISS - - [29/Jul/2026:09:25:13 +0000] "GET /wsx.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE8C6696A92F0672002932E03 - 404 MISS - - [29/Jul/2026:09:25:16 +0000] "GET /r79.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE8C6696A92F0672002932E03 - 404 MISS - - [29/Jul/2026:09:25:26 +0000] "GET /mpxct.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE8C6696A92F0672002932E03 - 404 MISS - - [29/Jul/2026:09:25:33 +0000] "GET /x3.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE8C6696A92F0672002932E03 - 404 MISS - - [29/Jul/2026:09:25:35 +0000] "GET /wan.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE8C6696A92F0672002932E03 - 404 MISS - - [29/Jul/2026:09:25:38 +0000] "GET /iov.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE8C6696A92F0672002932E03 - 404 MISS - - [29/Jul/2026:09:25:44 +0000] "GET /RsR.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE8C6696A92F0672002932E03 - 404 MISS - - [29/Jul/2026:09:25:48 +0000] "GET /ouh.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE8C6696A92F0672002932E03 - 404 MISS - - [29/Jul/2026:09:25:50 +0000] "GET /133.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - - - 404 MISS - - [29/Jul/2026:09:25:55 +0000] "GET /x0.php HTTP/1.1" 433 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F23C7696A8BF0B71F02846603 - 404 MISS - - [29/Jul/2026:09:26:02 +0000] "GET /wsr2.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F23C7696A8BF0B71F02846603 - 404 MISS - - [29/Jul/2026:09:26:05 +0000] "GET /hq.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F23C7696A8BF0B71F02846603 - 404 MISS - - [29/Jul/2026:09:26:07 +0000] "GET /blox.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F23C7696A8BF0B71F02846603 - 404 HIT - - [29/Jul/2026:09:26:09 +0000] "GET /ant.php HTTP/1.1" 403 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FDCA6696A8BF0B71F023D2C03 - 404 MISS - - [29/Jul/2026:09:26:10 +0000] "GET /fso.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FDCA6696A8BF0B71F023D2C03 - 403 BYPASS - - [29/Jul/2026:09:26:12 +0000] "GET /wp-content/admin.php HTTP/1.1" 297 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FDCA6696A8BF0B71F023D2C03 - 404 MISS - - [29/Jul/2026:09:26:13 +0000] "GET /2P.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:09:31:06 +0000] "POST /wp-cron.php?doing_wp_cron=1785317465.5172989368438720703125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 43.166.136.153 - - - 500 MISS - - [29/Jul/2026:09:31:06 +0000] "GET / HTTP/1.1" 3573 "https://www.redlighthealthbenefits.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "43.166.136.153, 43.166.136.153, 43.166.136.153, 43.166.136.153" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:09:32:16 +0000] "POST /wp-cron.php?doing_wp_cron=1785317536.1427009105682373046875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 103.57.220.209 - - - 200 BYPASS - - [29/Jul/2026:09:32:16 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.57.220.209, 103.57.220.209, 103.57.220.209, 103.57.220.209" 103.57.220.209 - _uid=0100007FA0C8696A8BF0B71F02F06703 - 200 BYPASS - - [29/Jul/2026:09:32:19 +0000] "POST /wp-login.php HTTP/1.1" 2802 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.57.220.209, 103.57.220.209, 103.57.220.209, 103.57.220.209" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:09:36:26 +0000] "POST /wp-cron.php?doing_wp_cron=1785317786.2285120487213134765625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 198.38.94.67 - - - 200 BYPASS - - [29/Jul/2026:09:36:26 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.67, 198.38.94.67, 198.38.94.67, 198.38.94.67" 198.38.94.67 - _uid=0100007F9AC9696A8BF0B71F02B06803 - 200 BYPASS - - [29/Jul/2026:09:36:28 +0000] "POST /wp-login.php HTTP/1.1" 2802 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.67, 198.38.94.67, 198.38.94.67, 198.38.94.67" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:09:46:41 +0000] "POST /wp-cron.php?doing_wp_cron=1785318401.0407080650329589843750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 192.250.239.173 - - - 200 BYPASS - - [29/Jul/2026:09:46:41 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.250.239.173, 192.250.239.173, 192.250.239.173, 192.250.239.173" 192.250.239.173 - _uid=0100007F01CC696A8BF0B71F02C16A03 - 200 BYPASS - - [29/Jul/2026:09:46:42 +0000] "POST /wp-login.php HTTP/1.1" 2805 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.250.239.173, 192.250.239.173, 192.250.239.173, 192.250.239.173" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:10:07:50 +0000] "POST /wp-cron.php?doing_wp_cron=1785319670.1092948913574218750000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 195.130.35.148 - - - 200 BYPASS - - [29/Jul/2026:10:07:50 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.130.35.148, 195.130.35.148, 195.130.35.148, 195.130.35.148" 195.130.35.148 - _uid=0100007FF6D0696A8BF0B71F02FE6E03 - 200 BYPASS - - [29/Jul/2026:10:07:51 +0000] "POST /wp-login.php HTTP/1.1" 2805 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.130.35.148, 195.130.35.148, 195.130.35.148, 195.130.35.148" 216.73.216.14 - _uid=0100007FB2C7686A6022FC3A02C59A03 - 200 HIT - - [29/Jul/2026:10:13:49 +0000] "GET /sitemap_index.xml HTTP/1.1" 1159 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "216.73.216.14, 216.73.216.14, 216.73.216.14, 216.73.216.14" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:10:26:04 +0000] "POST /wp-cron.php?doing_wp_cron=1785320763.9434940814971923828125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 142.93.10.93 - - - 200 BYPASS - - [29/Jul/2026:10:26:04 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "142.93.10.93, 142.93.10.93, 142.93.10.93, 142.93.10.93" 142.93.10.93 - _uid=0100007F3CD5696A92F06720020D3603 - 200 BYPASS - - [29/Jul/2026:10:26:05 +0000] "POST /wp-login.php HTTP/1.1" 2802 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "142.93.10.93, 142.93.10.93, 142.93.10.93, 142.93.10.93" 194.5.48.170 - - - 403 BYPASS - - [29/Jul/2026:10:38:08 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.170, 194.5.48.170, 194.5.48.170, 194.5.48.170" 194.5.48.169 - - - 403 BYPASS - - [29/Jul/2026:10:38:09 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.169, 194.5.48.169, 194.5.48.169, 194.5.48.169" 194.5.48.170 - - - 403 BYPASS - - [29/Jul/2026:10:38:09 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.170, 194.5.48.170, 194.5.48.170, 194.5.48.170" 167.172.93.1 - - - 200 BYPASS - - [29/Jul/2026:10:44:37 +0000] "GET /license.txt HTTP/1.1" 227 "-" "python-requests/2.27.1" "167.172.93.1, 167.172.93.1, 167.172.93.1, 167.172.93.1" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:11:01:36 +0000] "POST /wp-cron.php?doing_wp_cron=1785322896.3628830909729003906250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 195.250.23.54 - - - 200 BYPASS - - [29/Jul/2026:11:01:37 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.250.23.54, 195.250.23.54, 195.250.23.54, 195.250.23.54" 195.250.23.54 - _uid=0100007F91DD696A8BF0B71F02567B03 - 200 BYPASS - - [29/Jul/2026:11:01:38 +0000] "POST /wp-login.php HTTP/1.1" 2805 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.250.23.54, 195.250.23.54, 195.250.23.54, 195.250.23.54" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:11:16:49 +0000] "POST /wp-cron.php?doing_wp_cron=1785323809.1596899032592773437500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 213.165.88.159 - - - 200 BYPASS - - [29/Jul/2026:11:16:49 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "213.165.88.159, 213.165.88.159, 213.165.88.159, 213.165.88.159" 194.5.48.203 - - - 403 BYPASS - - [29/Jul/2026:11:23:06 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.203, 194.5.48.203, 194.5.48.203, 194.5.48.203" 194.5.48.208 - - - 403 BYPASS - - [29/Jul/2026:11:23:07 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.208, 194.5.48.208, 194.5.48.208, 194.5.48.208" 194.5.48.202 - - - 403 BYPASS - - [29/Jul/2026:11:23:07 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.202, 194.5.48.202, 194.5.48.202, 194.5.48.202" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:11:23:54 +0000] "POST /wp-cron.php?doing_wp_cron=1785324233.5403389930725097656250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:11:23:54 +0000] "POST /wp-cron.php?doing_wp_cron=1785324234.1913979053497314453125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:11:23:55 +0000] "POST /wp-cron.php?doing_wp_cron=1785324234.8039269447326660156250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 146.247.229.78 - - - 301 MISS - - [29/Jul/2026:11:23:55 +0000] "GET / HTTP/1.1" 398 "http://redlightbenefits.us7.cdn-alpha.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.1" "146.247.229.78" 151.248.5.35 - - - 500 MISS - - [29/Jul/2026:11:23:56 +0000] "GET / HTTP/1.1" 3573 "https://redlightbenefits.us7.cdn-alpha.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.1" "151.248.5.35, 151.248.5.35, 151.248.5.35, 151.248.5.35" 85.208.96.196 - - - 200 BYPASS - - [29/Jul/2026:11:38:34 +0000] "GET /category/red-light-therapy-for-muscle-recovery/ HTTP/1.1" 241 "-" "Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)" "85.208.96.196, 85.208.96.196, 85.208.96.196, 85.208.96.196" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:42 +0000] "GET /--wp-lgj.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:11:39:44 +0000] "POST /wp-cron.php?doing_wp_cron=1785325183.7656900882720947265625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 20.104.18.253 - - - 500 MISS - - [29/Jul/2026:11:39:44 +0000] "GET /.well-known/.well-known/ HTTP/1.1" 3390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:44 +0000] "GET /.well-known/autoload_classmap.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:44 +0000] "GET /.well-known/flower.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:45 +0000] "GET /.well-known/xleet.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:45 +0000] "GET /.well-known/acme-challenge/flower.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:45 +0000] "GET /.well-known/acme-challenge/xleet.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:46 +0000] "GET /.well-known/pki-validation/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:46 +0000] "GET /.well-known/pki-validation/autoload_classmap.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 500 MISS - - [29/Jul/2026:11:39:47 +0000] "GET /.well-known/pki-validation/configKZU/Jump/0-woodhous/Ven-C/Ven-US/0-upstartd/ HTTP/1.1" 3390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:47 +0000] "GET /.well-known/pki-validation/flower.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:47 +0000] "GET /.well-known/pki-validation/xleet.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:48 +0000] "GET /.wp-cli/autoload_classmap.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:48 +0000] "GET /.wp-cli/flower.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:48 +0000] "GET /.wp-cli/xleet.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [29/Jul/2026:11:39:48 +0000] "GET //wp-admin/network/autoload_classmap.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [29/Jul/2026:11:39:49 +0000] "GET //wp-admin/network/flower.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [29/Jul/2026:11:39:49 +0000] "GET //wp-admin/network/xleet.php/wp-content/flower.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 HIT - - [29/Jul/2026:11:39:49 +0000] "GET /1.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:49 +0000] "GET /admin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:50 +0000] "GET /as.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:50 +0000] "GET /autoload_classmap.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:50 +0000] "GET /back.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:50 +0000] "GET /c/autoload_classmap.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:51 +0000] "GET /c/flower.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:51 +0000] "GET /c/xleet.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:51 +0000] "GET /classwithtostring.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:51 +0000] "GET /content.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:52 +0000] "GET /doc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:52 +0000] "GET /dropdown.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 HIT - - [29/Jul/2026:11:39:52 +0000] "GET /ee.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:52 +0000] "GET /flower.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:53 +0000] "GET /gecko-new.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:53 +0000] "GET /m.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:53 +0000] "GET /mah/autoload_classmap.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:53 +0000] "GET /mah/flower.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:54 +0000] "GET /mah/xleet.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:54 +0000] "GET /mini.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:54 +0000] "GET /moon.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:54 +0000] "GET /new.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:55 +0000] "GET /radio.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 HIT - - [29/Jul/2026:11:39:55 +0000] "GET /s.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:55 +0000] "GET /sim.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:55 +0000] "GET /text.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:56 +0000] "GET /user.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 MISS - - [29/Jul/2026:11:39:56 +0000] "GET /webadmin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [29/Jul/2026:11:39:56 +0000] "GET /wordpress/wp-content/plugins/xcvbx/autoload_classmap.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [29/Jul/2026:11:39:56 +0000] "GET /wordpress/wp-content/plugins/xcvbx/flower.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [29/Jul/2026:11:39:57 +0000] "GET /wordpress/wp-content/plugins/xcvbx/xleet.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [29/Jul/2026:11:39:57 +0000] "GET /wordpress/wp-content/themes/as/autoload_classmap.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [29/Jul/2026:11:39:57 +0000] "GET /wordpress/wp-content/themes/as/flower.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [29/Jul/2026:11:39:57 +0000] "GET /wordpress/wp-content/themes/as/xleet.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [29/Jul/2026:11:39:58 +0000] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [29/Jul/2026:11:39:58 +0000] "GET /wp-admin/css/colors/autoload_classmap.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [29/Jul/2026:11:39:58 +0000] "GET /wp-admin/css/colors/flower.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [29/Jul/2026:11:39:58 +0000] "GET /wp-admin/css/colors/xleet.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [29/Jul/2026:11:39:59 +0000] "GET /wp-admin/flower.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [29/Jul/2026:11:39:59 +0000] "GET /wp-admin/maint/autoload_classmap.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [29/Jul/2026:11:39:59 +0000] "GET /wp-admin/maint/flower.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [29/Jul/2026:11:39:59 +0000] "GET /wp-admin/maint/xleet.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [29/Jul/2026:11:40:00 +0000] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [29/Jul/2026:11:40:00 +0000] "GET /wp-admin/network/flower.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [29/Jul/2026:11:40:00 +0000] "GET /wp-admin/network/xleet.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [29/Jul/2026:11:40:00 +0000] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [29/Jul/2026:11:40:01 +0000] "GET /wp-admin/user/flower.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [29/Jul/2026:11:40:01 +0000] "GET /wp-admin/user/xleet.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [29/Jul/2026:11:40:01 +0000] "GET /wp-admin/xleet.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 500 MISS - - [29/Jul/2026:11:40:01 +0000] "GET /wp-config-sample.php HTTP/1.1" 2853 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253" 57.141.0.55 - - - 200 BYPASS - - [29/Jul/2026:11:45:53 +0000] "GET /global-styles/ HTTP/1.1" 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" "57.141.0.55, 57.141.0.55, 57.141.0.55, 57.141.0.55" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:11:46:31 +0000] "POST /wp-cron.php?doing_wp_cron=1785325591.0173890590667724609375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 194.63.239.149 - - - 200 BYPASS - - [29/Jul/2026:11:46:31 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "194.63.239.149, 194.63.239.149, 194.63.239.149, 194.63.239.149" 194.63.239.149 - _uid=0100007F17E8696A92F0672002003F03 - 200 BYPASS - - [29/Jul/2026:11:46:32 +0000] "POST /wp-login.php HTTP/1.1" 2802 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "194.63.239.149, 194.63.239.149, 194.63.239.149, 194.63.239.149" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:11:50:20 +0000] "POST /wp-cron.php?doing_wp_cron=1785325820.3841569423675537109375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 216.73.216.14 - _uid=0100007FB2C7686A6022FC3A02C59A03 - 200 MISS - - [29/Jul/2026:11:50:21 +0000] "GET /sitemap_index.xml HTTP/1.1" 1179 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "216.73.216.14, 216.73.216.14, 216.73.216.14, 216.73.216.14" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:12 +0000] "GET /geju.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:12 +0000] "GET /wp-content/plugins/about.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:13 +0000] "GET /wp.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 HIT - - [29/Jul/2026:11:51:13 +0000] "GET /aaa.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:13 +0000] "GET /hoot.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 HIT - - [29/Jul/2026:11:51:14 +0000] "GET /about.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 HIT - - [29/Jul/2026:11:51:14 +0000] "GET /admin.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:14 +0000] "GET /wp-content/plugins/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:14 +0000] "GET /wp-content/db-cache.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:15 +0000] "GET /wp-content/themes/twentyeleven/functions.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:15 +0000] "GET /wp-content/themes/oceanwp/functions.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:15 +0000] "GET /wp-content/themes/twentythirteen/functions.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:15 +0000] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:16 +0000] "GET /wp-content/themes/twentytwenty/functions.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 HIT - - [29/Jul/2026:11:51:16 +0000] "GET /content.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:16 +0000] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:17 +0000] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:17 +0000] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:17 +0000] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:17 +0000] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:18 +0000] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:18 +0000] "GET /wp-includes/Requests/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:18 +0000] "GET /wp-includes/style-engine/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:18 +0000] "GET /wp-includes/rest-api/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:19 +0000] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:19 +0000] "GET /wp-content/banners/about.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:19 +0000] "GET /wp-content/about.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:20 +0000] "GET /.well-known/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:20 +0000] "GET /wp-includes/Text/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:20 +0000] "GET /wp-includes/ID3/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:20 +0000] "GET /img/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:21 +0000] "GET /wp-content/languages/about.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:21 +0000] "GET /wp-includes/customize/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:21 +0000] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:21 +0000] "GET /wp-includes/widgets/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:22 +0000] "GET /wp-includes/IXR/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [29/Jul/2026:11:51:22 +0000] "GET /wp-admin/js/about.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 HIT - - [29/Jul/2026:11:51:22 +0000] "GET /.well-known/pki-validation/about.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:22 +0000] "GET /wp-includes/pomo/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:23 +0000] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:23 +0000] "GET /wp-content/updraft/about.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:23 +0000] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:24 +0000] "GET /wp-content/themes/about.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:24 +0000] "GET /wp-admin/includes/about.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:24 +0000] "GET /images/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:24 +0000] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:25 +0000] "GET /wp-includes/images/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:25 +0000] "GET /wp-includes/about.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:25 +0000] "GET /cgi-bin/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:25 +0000] "GET /wp-content/gallery/about.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:26 +0000] "GET /wp-includes/blocks/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [29/Jul/2026:11:51:26 +0000] "GET /wp-admin/css/about.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [29/Jul/2026:11:51:26 +0000] "GET /wp-admin/images/about.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:26 +0000] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:27 +0000] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [29/Jul/2026:11:51:27 +0000] "GET /wp-admin/network/cloud.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:27 +0000] "GET /cloud.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:28 +0000] "GET /cgi-bin/cloud.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:28 +0000] "GET /wp-content/updates.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:28 +0000] "GET /css/cloud.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [29/Jul/2026:11:51:28 +0000] "GET /wp-admin/user/cloud.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:29 +0000] "GET /img/cloud.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [29/Jul/2026:11:51:29 +0000] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [29/Jul/2026:11:51:29 +0000] "GET /wp-admin/images/cloud.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:29 +0000] "GET /avaa.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:30 +0000] "GET /images/cloud.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [29/Jul/2026:11:51:30 +0000] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:30 +0000] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [29/Jul/2026:11:51:30 +0000] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:31 +0000] "GET /wp-admin/includes/cloud.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [29/Jul/2026:11:51:31 +0000] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [29/Jul/2026:11:51:31 +0000] "GET /wp-admin/cloud.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:32 +0000] "GET /updates.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:32 +0000] "GET /libraries/legacy/updates.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:33 +0000] "GET /libraries/phpmailer/updates.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:33 +0000] "GET /libraries/vendor/updates.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:11:51:34 +0000] "POST /wp-cron.php?doing_wp_cron=1785325894.4889159202575683593750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 135.119.63.61 - - - 500 MISS - - [29/Jul/2026:11:51:35 +0000] "GET /alfa-rex.php7 HTTP/1.1" 3390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [29/Jul/2026:11:51:35 +0000] "GET /alfanew.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:35 +0000] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 500 BYPASS - - [29/Jul/2026:11:51:36 +0000] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 3403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 500 MISS - - [29/Jul/2026:11:51:37 +0000] "GET /wp-p.php7 HTTP/1.1" 3390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [29/Jul/2026:11:51:38 +0000] "GET /wp-admin/repeater.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:38 +0000] "GET /wp-includes/repeater.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [29/Jul/2026:11:51:38 +0000] "GET /wp-content/repeater.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:11:52:56 +0000] "POST /wp-cron.php?doing_wp_cron=1785325976.1236960887908935546875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 103.75.185.95 - - - 200 BYPASS - - [29/Jul/2026:11:52:56 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.75.185.95, 103.75.185.95, 103.75.185.95, 103.75.185.95" 103.75.185.95 - _uid=0100007F98E9696A8BF0B71F02C28403 - 200 BYPASS - - [29/Jul/2026:11:52:58 +0000] "POST /wp-login.php HTTP/1.1" 2805 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.75.185.95, 103.75.185.95, 103.75.185.95, 103.75.185.95" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:11:55:38 +0000] "POST /wp-cron.php?doing_wp_cron=1785326138.0871748924255371093750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 198.38.94.87 - - - 200 BYPASS - - [29/Jul/2026:11:55:38 +0000] "GET /wp-login.php HTTP/1.1" 2769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.87, 198.38.94.87, 198.38.94.87, 198.38.94.87" 198.38.94.87 - _uid=0100007F3AEA696A8BF0B71F02118503 - 200 BYPASS - - [29/Jul/2026:11:55:39 +0000] "POST /wp-login.php HTTP/1.1" 2802 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.87, 198.38.94.87, 198.38.94.87, 198.38.94.87" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:12:01:28 +0000] "POST /wp-cron.php?doing_wp_cron=1785326488.2925720214843750000000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 190.92.174.31 - - - 200 BYPASS - - [29/Jul/2026:12:01:28 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "190.92.174.31, 190.92.174.31, 190.92.174.31, 190.92.174.31" 190.92.174.31 - _uid=0100007F98EB696A92F06720028A3F03 - 200 BYPASS - - [29/Jul/2026:12:01:29 +0000] "POST /wp-login.php HTTP/1.1" 2806 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "190.92.174.31, 190.92.174.31, 190.92.174.31, 190.92.174.31" 194.5.48.215 - - - 403 BYPASS - - [29/Jul/2026:12:04:41 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.215, 194.5.48.215, 194.5.48.215, 194.5.48.215" 194.5.48.217 - - - 403 BYPASS - - [29/Jul/2026:12:04:41 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.217, 194.5.48.217, 194.5.48.217, 194.5.48.217" 194.5.48.215 - - - 403 BYPASS - - [29/Jul/2026:12:04:42 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.215, 194.5.48.215, 194.5.48.215, 194.5.48.215" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:12:11:13 +0000] "POST /wp-cron.php?doing_wp_cron=1785327073.0981230735778808593750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 195.130.35.148 - - - 200 BYPASS - - [29/Jul/2026:12:11:13 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.130.35.148, 195.130.35.148, 195.130.35.148, 195.130.35.148" 195.130.35.148 - _uid=0100007FE1ED696A8BF0B71F02998603 - 200 BYPASS - - [29/Jul/2026:12:11:14 +0000] "POST /wp-login.php HTTP/1.1" 2803 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.130.35.148, 195.130.35.148, 195.130.35.148, 195.130.35.148" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:12:18:13 +0000] "POST /wp-cron.php?doing_wp_cron=1785327492.9507770538330078125000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 184.168.126.180 - - - 200 BYPASS - - [29/Jul/2026:12:18:13 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "184.168.126.180, 184.168.126.180, 184.168.126.180, 184.168.126.180" 184.168.126.180 - _uid=0100007F85EF696A8BF0B71F02088803 - 200 BYPASS - - [29/Jul/2026:12:18:14 +0000] "POST /wp-login.php HTTP/1.1" 2806 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "184.168.126.180, 184.168.126.180, 184.168.126.180, 184.168.126.180" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:12:31:11 +0000] "POST /wp-cron.php?doing_wp_cron=1785328271.4605159759521484375000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:12:31:12 +0000] "POST /wp-cron.php?doing_wp_cron=1785328272.1165480613708496093750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:12:31:13 +0000] "POST /wp-cron.php?doing_wp_cron=1785328273.0352520942687988281250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 188.166.49.184 - - - 500 MISS - - [29/Jul/2026:12:31:13 +0000] "GET / HTTP/1.1" 3573 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "188.166.49.184, 188.166.49.184, 188.166.49.184, 188.166.49.184" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:12:38:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785328738.4304440021514892578125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 192.241.143.148 - - - 200 BYPASS - - [29/Jul/2026:12:38:59 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.241.143.148, 192.241.143.148, 192.241.143.148, 192.241.143.148" 192.241.143.148 - _uid=0100007F63F4696A8BF0B71F02618B03 - 200 BYPASS - - [29/Jul/2026:12:38:59 +0000] "POST /wp-login.php HTTP/1.1" 2803 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.241.143.148, 192.241.143.148, 192.241.143.148, 192.241.143.148" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:12:42:44 +0000] "POST /wp-cron.php?doing_wp_cron=1785328963.9784390926361083984375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 97.74.93.24 - - - 200 BYPASS - - [29/Jul/2026:12:42:44 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "97.74.93.24, 97.74.93.24, 97.74.93.24, 97.74.93.24" 57.141.0.70 - - - 200 BYPASS - - [29/Jul/2026:12:42:46 +0000] "GET /about/ HTTP/1.1" 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" "57.141.0.70, 57.141.0.70, 57.141.0.70, 57.141.0.70" 97.74.93.24 - _uid=0100007F44F5696A92F0672002DC4003 - 200 BYPASS - - [29/Jul/2026:12:42:46 +0000] "POST /wp-login.php HTTP/1.1" 2806 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "97.74.93.24, 97.74.93.24, 97.74.93.24, 97.74.93.24" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:12:52:05 +0000] "POST /wp-cron.php?doing_wp_cron=1785329525.1131439208984375000000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 43.157.22.109 - - - 500 MISS - - [29/Jul/2026:12:52:05 +0000] "GET / HTTP/1.1" 3573 "http://redlighthealthbenefits.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "43.157.22.109, 43.157.22.109, 43.157.22.109, 43.157.22.109" 194.5.48.176 - - - 403 BYPASS - - [29/Jul/2026:13:02:25 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.176, 194.5.48.176, 194.5.48.176, 194.5.48.176" 194.5.48.176 - - - 403 BYPASS - - [29/Jul/2026:13:02:26 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.176, 194.5.48.176, 194.5.48.176, 194.5.48.176" 194.5.48.181 - - - 403 BYPASS - - [29/Jul/2026:13:02:26 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.181, 194.5.48.181, 194.5.48.181, 194.5.48.181" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:13:09:08 +0000] "POST /wp-cron.php?doing_wp_cron=1785330547.9492559432983398437500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 157.66.191.8 - - - 200 BYPASS - - [29/Jul/2026:13:09:08 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "157.66.191.8, 157.66.191.8, 157.66.191.8, 157.66.191.8" 157.66.191.8 - _uid=0100007F74FB696A92F0672002354103 - 200 BYPASS - - [29/Jul/2026:13:09:09 +0000] "POST /wp-login.php HTTP/1.1" 2806 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "157.66.191.8, 157.66.191.8, 157.66.191.8, 157.66.191.8" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:13:30:37 +0000] "POST /wp-cron.php?doing_wp_cron=1785331837.3792259693145751953125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 167.71.70.215 - - - 200 BYPASS - - [29/Jul/2026:13:30:38 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.71.70.215, 167.71.70.215, 167.71.70.215, 167.71.70.215" 167.71.70.215 - _uid=0100007F7E006A6A8BF0B71F02BE9103 - 200 BYPASS - - [29/Jul/2026:13:30:39 +0000] "POST /wp-login.php HTTP/1.1" 2803 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.71.70.215, 167.71.70.215, 167.71.70.215, 167.71.70.215" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:13:35:56 +0000] "POST /wp-cron.php?doing_wp_cron=1785332156.1207709312438964843750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 94.130.11.28 - - - 200 BYPASS - - [29/Jul/2026:13:35:56 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "94.130.11.28, 94.130.11.28, 94.130.11.28, 94.130.11.28" 94.130.11.28 - _uid=0100007FBC016A6A92F06720022B4203 - 200 BYPASS - - [29/Jul/2026:13:35:57 +0000] "POST /wp-login.php HTTP/1.1" 2806 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "94.130.11.28, 94.130.11.28, 94.130.11.28, 94.130.11.28" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:13:37:48 +0000] "POST /wp-cron.php?doing_wp_cron=1785332267.5253939628601074218750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 198.38.94.17 - - - 200 BYPASS - - [29/Jul/2026:13:37:48 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17, 198.38.94.17, 198.38.94.17, 198.38.94.17" 198.38.94.17 - _uid=0100007F2C026A6A8BF0B71F02BF9203 - 200 BYPASS - - [29/Jul/2026:13:37:49 +0000] "POST /wp-login.php HTTP/1.1" 2806 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17, 198.38.94.17, 198.38.94.17, 198.38.94.17" 216.73.216.14 - _uid=0100007FB2C7686A6022FC3A02C59A03 - 200 HIT - - [29/Jul/2026:13:43:10 +0000] "GET /sitemap_index.xml HTTP/1.1" 1159 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "216.73.216.14, 216.73.216.14, 216.73.216.14, 216.73.216.14" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:13:50:23 +0000] "POST /wp-cron.php?doing_wp_cron=1785333022.5334661006927490234375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:13:50:23 +0000] "POST /wp-cron.php?doing_wp_cron=1785333023.1970651149749755859375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:13:50:24 +0000] "POST /wp-cron.php?doing_wp_cron=1785333024.1376919746398925781250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 43.130.67.6 - - - 500 MISS - - [29/Jul/2026:13:50:24 +0000] "GET / HTTP/1.1" 3573 "https://www.redlighthealthbenefits.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "43.130.67.6, 43.130.67.6, 43.130.67.6, 43.130.67.6" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:14:00:26 +0000] "POST /wp-cron.php?doing_wp_cron=1785333626.2320549488067626953125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 198.38.94.67 - - - 200 BYPASS - - [29/Jul/2026:14:00:26 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.67, 198.38.94.67, 198.38.94.67, 198.38.94.67" 198.38.94.67 - _uid=0100007F7A076A6A92F0672002BE4203 - 200 BYPASS - - [29/Jul/2026:14:00:27 +0000] "POST /wp-login.php HTTP/1.1" 2806 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.67, 198.38.94.67, 198.38.94.67, 198.38.94.67" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:14:02:39 +0000] "POST /wp-cron.php?doing_wp_cron=1785333758.7429459095001220703125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 185.115.217.185 - - - 200 BYPASS - - [29/Jul/2026:14:02:39 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "185.115.217.185, 185.115.217.185, 185.115.217.185, 185.115.217.185" 185.115.217.185 - _uid=0100007FFF076A6A8BF0B71F02F39403 - 200 BYPASS - - [29/Jul/2026:14:02:40 +0000] "POST /wp-login.php HTTP/1.1" 2806 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "185.115.217.185, 185.115.217.185, 185.115.217.185, 185.115.217.185" 64.89.161.160 - - - 404 MISS - - [29/Jul/2026:14:04:25 +0000] "GET /assets/fileupload/index.php?file=tf2rghf.jpg HTTP/1.1" 433 "-" "ALittle Client" "64.89.161.160, 64.89.161.160, 64.89.161.160, 64.89.161.160" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:14:10:39 +0000] "POST /wp-cron.php?doing_wp_cron=1785334238.4736719131469726562500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 104.207.62.70 - - - 500 MISS - - [29/Jul/2026:14:10:39 +0000] "GET / HTTP/1.1" 3573 "-" "Mozilla/5.0 (X11; Linux i686; rv:133.0) Gecko/20100101 Firefox/133.0" "104.207.62.70, 104.207.62.70, 104.207.62.70, 104.207.62.70" 51.68.236.114 - - - 200 BYPASS - - [29/Jul/2026:14:17:49 +0000] "GET / HTTP/1.1" 241 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" "51.68.236.114, 51.68.236.114, 51.68.236.114, 51.68.236.114" 103.60.15.164 - _uid=0100007F4A17696ABDC20B97029B6A03 - 200 BYPASS - - [29/Jul/2026:14:24:46 +0000] "GET /wp-content/uploads/2024/01/Illuminating-Cardiovascular-Health-The-Impact-of-Red-Light-Therapy-1536x864.jpg?nonwebp=1&edge=redlighthealthbenefits.com HTTP/1.1" 49330 "-" "BunnyOptimizer-v01" "103.60.15.164, 103.60.15.164, 103.60.15.164" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:14:54:24 +0000] "POST /wp-cron.php?doing_wp_cron=1785336863.7107400894165039062500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 160.250.130.168 - - - 200 BYPASS - - [29/Jul/2026:14:54:24 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "160.250.130.168, 160.250.130.168, 160.250.130.168, 160.250.130.168" 160.250.130.168 - _uid=0100007F20146A6A8BF0B71F02019A03 - 200 BYPASS - - [29/Jul/2026:14:54:26 +0000] "POST /wp-login.php HTTP/1.1" 2806 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "160.250.130.168, 160.250.130.168, 160.250.130.168, 160.250.130.168" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:15:02:48 +0000] "POST /wp-cron.php?doing_wp_cron=1785337368.0448338985443115234375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 5.182.209.54 - - - 200 BYPASS - - [29/Jul/2026:15:02:48 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "5.182.209.54, 5.182.209.54, 5.182.209.54, 5.182.209.54" 5.182.209.54 - _uid=0100007F18166A6A8BF0B71F02BB9A03 - 200 BYPASS - - [29/Jul/2026:15:02:49 +0000] "POST /wp-login.php HTTP/1.1" 2806 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "5.182.209.54, 5.182.209.54, 5.182.209.54, 5.182.209.54" 216.73.216.14 - _uid=0100007FB2C7686A6022FC3A02C59A03 - 200 HIT - - [29/Jul/2026:15:05:37 +0000] "GET /sitemap_index.xml HTTP/1.1" 1159 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "216.73.216.14, 216.73.216.14, 216.73.216.14, 216.73.216.14" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:15:19:37 +0000] "POST /wp-cron.php?doing_wp_cron=1785338377.2241320610046386718750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:15:19:38 +0000] "POST /wp-cron.php?doing_wp_cron=1785338378.1803040504455566406250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 91.92.47.153 - - - 500 MISS - - [29/Jul/2026:15:19:38 +0000] "GET /.env HTTP/1.1" 3390 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36" "91.92.47.153, 91.92.47.153, 91.92.47.153, 91.92.47.153" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:15:19:39 +0000] "POST /wp-cron.php?doing_wp_cron=1785338374.2121529579162597656250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:15:23:31 +0000] "POST /wp-cron.php?doing_wp_cron=1785338610.8032960891723632812500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 198.38.94.17 - - - 200 BYPASS - - [29/Jul/2026:15:23:31 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17, 198.38.94.17, 198.38.94.17, 198.38.94.17" 198.38.94.17 - _uid=0100007FF31A6A6A8BF0B71F02AC9E03 - 200 BYPASS - - [29/Jul/2026:15:23:32 +0000] "POST /wp-login.php HTTP/1.1" 2803 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17, 198.38.94.17, 198.38.94.17, 198.38.94.17" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:15:25:13 +0000] "POST /wp-cron.php?doing_wp_cron=1785338713.1996591091156005859375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 72.167.132.114 - - - 200 BYPASS - - [29/Jul/2026:15:25:13 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114, 72.167.132.114, 72.167.132.114, 72.167.132.114" 72.167.132.114 - _uid=0100007F591B6A6A8BF0B71F02C39E03 - 200 BYPASS - - [29/Jul/2026:15:25:15 +0000] "POST /wp-login.php HTTP/1.1" 2803 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114, 72.167.132.114, 72.167.132.114, 72.167.132.114" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:15:36:04 +0000] "POST /wp-cron.php?doing_wp_cron=1785339363.9053680896759033203125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 172.238.253.23 - - - 500 MISS - - [29/Jul/2026:15:36:04 +0000] "GET / HTTP/1.1" 3573 "http://redlighthealthbenefits.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" "172.238.253.23, 172.238.253.23, 172.238.253.23, 172.238.253.23" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:15:54:54 +0000] "POST /wp-cron.php?doing_wp_cron=1785340493.6222839355468750000000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 68.178.160.25 - - - 200 BYPASS - - [29/Jul/2026:15:54:54 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "68.178.160.25, 68.178.160.25, 68.178.160.25, 68.178.160.25" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:15:57:20 +0000] "POST /wp-cron.php?doing_wp_cron=1785340639.8773860931396484375000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 195.250.23.54 - - - 200 BYPASS - - [29/Jul/2026:15:57:20 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.250.23.54, 195.250.23.54, 195.250.23.54, 195.250.23.54" 195.250.23.54 - _uid=0100007FE0226A6A8BF0B71F0253A403 - 499 BYPASS - - [29/Jul/2026:15:57:22 +0000] "POST /wp-login.php HTTP/1.1" 0 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.250.23.54, 195.250.23.54, 195.250.23.54, 195.250.23.54" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:16:01:37 +0000] "POST /wp-cron.php?doing_wp_cron=1785340896.9401209354400634765625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 97.74.93.24 - - - 200 BYPASS - - [29/Jul/2026:16:01:37 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "97.74.93.24, 97.74.93.24, 97.74.93.24, 97.74.93.24" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:16:03:51 +0000] "POST /wp-cron.php?doing_wp_cron=1785341030.8341820240020751953125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 103.174.51.103 - - - 200 BYPASS - - [29/Jul/2026:16:03:51 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.174.51.103, 103.174.51.103, 103.174.51.103, 103.174.51.103" 103.174.51.103 - _uid=0100007F67246A6A8BF0B71F0255A503 - 200 BYPASS - - [29/Jul/2026:16:04:18 +0000] "POST /wp-login.php HTTP/1.1" 2806 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.174.51.103, 103.174.51.103, 103.174.51.103, 103.174.51.103" 212.32.76.66 - - - 403 BYPASS - - [29/Jul/2026:16:05:57 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "212.32.76.66, 212.32.76.66, 212.32.76.66, 212.32.76.66" 203.25.124.204 - - - 403 BYPASS - - [29/Jul/2026:16:05:57 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "203.25.124.204, 203.25.124.204, 203.25.124.204, 203.25.124.204" 203.25.124.199 - - - 403 BYPASS - - [29/Jul/2026:16:05:57 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "203.25.124.199, 203.25.124.199, 203.25.124.199, 203.25.124.199" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:16:22:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785342179.3121299743652343750000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:16:23:00 +0000] "POST /wp-cron.php?doing_wp_cron=1785342179.9678339958190917968750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 113.88.76.79 - - - 200 MISS - - [29/Jul/2026:16:23:00 +0000] "GET /robots.txt HTTP/1.1" 566 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.3681.106 Safari/537.36 Core/1.70.3722.400 QQBrowser/10.5.3739.400" "113.88.76.79, 113.88.76.79, 113.88.76.79, 113.88.76.79" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:16:23:00 +0000] "POST /wp-cron.php?doing_wp_cron=1785342176.3006839752197265625000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 51.81.81.39 - - - 404 BYPASS - - [29/Jul/2026:17:01:29 +0000] "GET /wp-content/plugins/all-in-one-wp-migration/lib/view/assets/css/updater.min.css HTTP/1.1" 385 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" "51.81.81.39, 51.81.81.39, 51.81.81.39, 51.81.81.39" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:17:05:43 +0000] "POST /wp-cron.php?doing_wp_cron=1785344743.1574618816375732421875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 142.147.170.47 - - - 500 MISS - - [29/Jul/2026:17:05:43 +0000] "GET /2024/02/21/red-light-therapy-for-skin-health/ HTTP/1.1" 3639 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "142.147.170.47, 142.147.170.47, 142.147.170.47, 142.147.170.47" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:17:14:31 +0000] "POST /wp-cron.php?doing_wp_cron=1785345270.6296589374542236328125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 216.73.216.14 - _uid=0100007FE4286A6A8BF0B71F0248A903 - 200 MISS - - [29/Jul/2026:17:14:31 +0000] "GET /sitemap_index.xml HTTP/1.1" 1179 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "216.73.216.14, 216.73.216.14, 216.73.216.14, 216.73.216.14" 209.87.167.162 - - - 500 MISS - - [29/Jul/2026:17:17:11 +0000] "GET /.env HTTP/1.1" 3390 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" "209.87.167.162, 209.87.167.162, 209.87.167.162, 209.87.167.162" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:17:17:11 +0000] "POST /wp-cron.php?doing_wp_cron=1785345430.0916049480438232421875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 212.32.76.31 - - - 403 BYPASS - - [29/Jul/2026:17:18:47 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "212.32.76.31, 212.32.76.31, 212.32.76.31, 212.32.76.31" 212.32.76.33 - - - 403 BYPASS - - [29/Jul/2026:17:18:47 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "212.32.76.33, 212.32.76.33, 212.32.76.33, 212.32.76.33" 203.25.124.114 - - - 403 BYPASS - - [29/Jul/2026:17:18:47 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "203.25.124.114, 203.25.124.114, 203.25.124.114, 203.25.124.114" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:17:38:29 +0000] "POST /wp-cron.php?doing_wp_cron=1785346708.7804028987884521484375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 198.38.94.17 - - - 200 BYPASS - - [29/Jul/2026:17:38:29 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17, 198.38.94.17, 198.38.94.17, 198.38.94.17" 198.38.94.17 - _uid=0100007F953A6A6A8BF0B71F0241B403 - 200 BYPASS - - [29/Jul/2026:17:38:30 +0000] "POST /wp-login.php HTTP/1.1" 2806 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17, 198.38.94.17, 198.38.94.17, 198.38.94.17" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:17:39:35 +0000] "POST /wp-cron.php?doing_wp_cron=1785346774.6235609054565429687500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 192.250.229.134 - - - 200 BYPASS - - [29/Jul/2026:17:39:35 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.250.229.134, 192.250.229.134, 192.250.229.134, 192.250.229.134" 192.250.229.134 - _uid=0100007FD73A6A6A8BF0B71F0265B403 - 200 BYPASS - - [29/Jul/2026:17:39:36 +0000] "POST /wp-login.php HTTP/1.1" 2803 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.250.229.134, 192.250.229.134, 192.250.229.134, 192.250.229.134" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:17:40:41 +0000] "POST /wp-cron.php?doing_wp_cron=1785346840.5967009067535400390625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:17:40:41 +0000] "POST /wp-cron.php?doing_wp_cron=1785346841.2388520240783691406250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:17:40:42 +0000] "POST /wp-cron.php?doing_wp_cron=1785346842.1500780582427978515625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 178.63.73.169 - - - 500 MISS - - [29/Jul/2026:17:40:42 +0000] "GET / HTTP/1.1" 3573 "https://www.redlighthealthbenefits.com/" "Mozilla/5.0 (compatible; wp2shell-checker/1.0)" "178.63.73.169, 178.63.73.169, 178.63.73.169, 178.63.73.169" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:17:53:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785347638.4195129871368408203125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 43.153.122.30 - - - 500 MISS - - [29/Jul/2026:17:53:59 +0000] "GET / HTTP/1.1" 3573 "http://redlighthealthbenefits.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "43.153.122.30, 43.153.122.30, 43.153.122.30, 43.153.122.30" 194.5.48.217 - - - 403 BYPASS - - [29/Jul/2026:17:57:06 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.217, 194.5.48.217, 194.5.48.217, 194.5.48.217" 194.5.48.222 - - - 403 BYPASS - - [29/Jul/2026:17:57:06 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.222, 194.5.48.222, 194.5.48.222, 194.5.48.222" 116.179.32.207 - - - 200 BYPASS - - [29/Jul/2026:18:17:33 +0000] "GET /contact/ HTTP/1.1" 241 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" "116.179.32.207, 116.179.32.207, 116.179.32.207, 116.179.32.207" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:18:31:46 +0000] "POST /wp-cron.php?doing_wp_cron=1785349905.9368350505828857421875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 46.101.194.217 - - - 200 BYPASS - - [29/Jul/2026:18:31:46 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "46.101.194.217, 46.101.194.217, 46.101.194.217, 46.101.194.217" 46.101.194.217 - _uid=0100007F12476A6A92F06720023A4D03 - 200 BYPASS - - [29/Jul/2026:18:31:47 +0000] "POST /wp-login.php HTTP/1.1" 2803 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "46.101.194.217, 46.101.194.217, 46.101.194.217, 46.101.194.217" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:18:39:49 +0000] "POST /wp-cron.php?doing_wp_cron=1785350389.0306329727172851562500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 103.174.51.103 - - - 200 BYPASS - - [29/Jul/2026:18:39:49 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.174.51.103, 103.174.51.103, 103.174.51.103, 103.174.51.103" 103.174.51.103 - _uid=0100007FF5486A6A8BF0B71F02D4B903 - 200 BYPASS - - [29/Jul/2026:18:39:53 +0000] "POST /wp-login.php HTTP/1.1" 2803 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.174.51.103, 103.174.51.103, 103.174.51.103, 103.174.51.103" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:18:59:13 +0000] "POST /wp-cron.php?doing_wp_cron=1785351552.7392699718475341796875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 154.38.175.180 - - - 200 BYPASS - - [29/Jul/2026:18:59:13 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "154.38.175.180, 154.38.175.180, 154.38.175.180, 154.38.175.180" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:19:04:28 +0000] "POST /wp-cron.php?doing_wp_cron=1785351868.2710609436035156250000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 69.57.172.110 - - - 200 BYPASS - - [29/Jul/2026:19:04:28 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "69.57.172.110, 69.57.172.110, 69.57.172.110, 69.57.172.110" 69.57.172.110 - _uid=0100007FBC4E6A6A8BF0B71F0267BB03 - 200 BYPASS - - [29/Jul/2026:19:04:29 +0000] "POST /wp-login.php HTTP/1.1" 2806 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "69.57.172.110, 69.57.172.110, 69.57.172.110, 69.57.172.110" 216.73.216.14 - _uid=0100007FE4286A6A8BF0B71F0248A903 - 200 HIT - - [29/Jul/2026:19:09:46 +0000] "GET /sitemap_index.xml HTTP/1.1" 1159 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "216.73.216.14, 216.73.216.14, 216.73.216.14, 216.73.216.14" 64.89.163.68 - - - 403 BYPASS - - [29/Jul/2026:19:23:17 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 403 BYPASS - - [29/Jul/2026:19:23:17 +0000] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 404 BYPASS - - [29/Jul/2026:19:23:17 +0000] "POST /wp-plain.php HTTP/1.1" 376 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 403 BYPASS - - [29/Jul/2026:19:23:17 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 404 MISS - - [29/Jul/2026:19:23:17 +0000] "GET /mfzzcvrg.php?Fox=d3wL7 HTTP/1.1" 492 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:19:23:18 +0000] "POST /wp-cron.php?doing_wp_cron=1785352997.7088940143585205078125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:19:23:18 +0000] "POST /wp-cron.php?doing_wp_cron=1785352997.8404200077056884765625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:19:23:18 +0000] "POST /wp-cron.php?doing_wp_cron=1785352998.5155210494995117187500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:19:23:19 +0000] "POST /wp-cron.php?doing_wp_cron=1785352998.4451749324798583984375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:19:23:19 +0000] "POST /wp-cron.php?doing_wp_cron=1785352999.4821081161499023437500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:19:23:19 +0000] "POST /wp-cron.php?doing_wp_cron=1785352999.4553210735321044921875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 64.89.163.68 - - - 500 BYPASS - - [29/Jul/2026:19:23:20 +0000] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 3392 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 500 MISS - - [29/Jul/2026:19:23:20 +0000] "GET / HTTP/1.1" 3573 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 403 BYPASS - - [29/Jul/2026:19:23:20 +0000] "GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/1.1" 467 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 404 MISS - - [29/Jul/2026:19:23:20 +0000] "GET /plugins/content/apismtp/apismtp.php?test=hello HTTP/1.1" 492 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 500 BYPASS - - [29/Jul/2026:19:23:21 +0000] "POST /alfacgiapi/perl.alfa HTTP/1.1" 3392 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 500 MISS - - [29/Jul/2026:19:23:22 +0000] "GET /wp-content/plugins/apikey/apikey.php.suspected?test=hello HTTP/1.1" 3390 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 500 MISS - - [29/Jul/2026:19:23:23 +0000] "GET /plugins/content/apismtp/apismtp.php.suspected?test=hello HTTP/1.1" 3390 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:19:28:40 +0000] "POST /wp-cron.php?doing_wp_cron=1785353320.4453001022338867187500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 43.159.152.4 - - - 500 MISS - - [29/Jul/2026:19:28:41 +0000] "GET / HTTP/1.1" 3573 "https://www.redlighthealthbenefits.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "43.159.152.4, 43.159.152.4, 43.159.152.4, 43.159.152.4" 194.5.48.192 - - - 403 BYPASS - - [29/Jul/2026:19:52:18 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.192, 194.5.48.192, 194.5.48.192, 194.5.48.192" 194.5.48.185 - - - 403 BYPASS - - [29/Jul/2026:19:52:18 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.185, 194.5.48.185, 194.5.48.185, 194.5.48.185" 194.5.48.194 - - - 403 BYPASS - - [29/Jul/2026:19:52:18 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.194, 194.5.48.194, 194.5.48.194, 194.5.48.194" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:19:59:28 +0000] "POST /wp-cron.php?doing_wp_cron=1785355167.9477200508117675781250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 167.71.240.77 - - - 200 BYPASS - - [29/Jul/2026:19:59:28 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.71.240.77, 167.71.240.77, 167.71.240.77, 167.71.240.77" 167.71.240.77 - _uid=0100007FA05B6A6A8BF0B71F02A3C003 - 200 BYPASS - - [29/Jul/2026:19:59:29 +0000] "POST /wp-login.php HTTP/1.1" 2806 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.71.240.77, 167.71.240.77, 167.71.240.77, 167.71.240.77" 135.125.175.196 - - - 200 BYPASS - - [29/Jul/2026:20:00:19 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.125.175.196, 135.125.175.196, 135.125.175.196, 135.125.175.196" 135.125.175.196 - _uid=0100007FD35B6A6A92F0672002E74E03 - 200 BYPASS - - [29/Jul/2026:20:00:20 +0000] "POST /wp-login.php HTTP/1.1" 2803 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.125.175.196, 135.125.175.196, 135.125.175.196, 135.125.175.196" 114.119.133.87 - - - 200 BYPASS - - [29/Jul/2026:20:06:07 +0000] "GET /sitemap_index.xml HTTP/1.1" 225 "-" "Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" "114.119.133.87, 114.119.133.87, 114.119.133.87, 114.119.133.87" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:20:08:53 +0000] "POST /wp-cron.php?doing_wp_cron=1785355733.0411169528961181640625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 69.57.172.96 - - - 200 BYPASS - - [29/Jul/2026:20:08:53 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "69.57.172.96, 69.57.172.96, 69.57.172.96, 69.57.172.96" 69.57.172.96 - _uid=0100007FD55D6A6A92F0672002794F03 - 200 BYPASS - - [29/Jul/2026:20:08:54 +0000] "POST /wp-login.php HTTP/1.1" 2806 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "69.57.172.96, 69.57.172.96, 69.57.172.96, 69.57.172.96" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:20:19:33 +0000] "POST /wp-cron.php?doing_wp_cron=1785356373.1882131099700927734375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 154.38.175.180 - - - 200 BYPASS - - [29/Jul/2026:20:19:33 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "154.38.175.180, 154.38.175.180, 154.38.175.180, 154.38.175.180" 154.38.175.180 - _uid=0100007F55606A6A8BF0B71F0267C503 - 200 BYPASS - - [29/Jul/2026:20:19:34 +0000] "POST /wp-login.php HTTP/1.1" 2803 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "154.38.175.180, 154.38.175.180, 154.38.175.180, 154.38.175.180" 194.5.48.181 - - - 403 BYPASS - - [29/Jul/2026:20:28:56 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.181, 194.5.48.181, 194.5.48.181, 194.5.48.181" 194.5.48.191 - - - 403 BYPASS - - [29/Jul/2026:20:28:56 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.191, 194.5.48.191, 194.5.48.191, 194.5.48.191" 194.5.48.182 - - - 403 BYPASS - - [29/Jul/2026:20:28:56 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.182, 194.5.48.182, 194.5.48.182, 194.5.48.182" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:20:30:12 +0000] "POST /wp-cron.php?doing_wp_cron=1785357011.8126249313354492187500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:20:30:12 +0000] "POST /wp-cron.php?doing_wp_cron=1785357012.4483139514923095703125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:20:30:13 +0000] "POST /wp-cron.php?doing_wp_cron=1785357013.3476080894470214843750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 111.230.233.46 - - - 500 MISS - - [29/Jul/2026:20:30:14 +0000] "GET / HTTP/1.1" 3573 "https://www.redlighthealthbenefits.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "111.230.233.46, 111.230.233.46, 111.230.233.46, 111.230.233.46" 62.112.201.5 - - - 403 BYPASS - - [29/Jul/2026:20:36:58 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.0.0 Safari/537.36" "62.112.201.5, 62.112.201.5, 62.112.201.5, 62.112.201.5" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:20:40:53 +0000] "POST /wp-cron.php?doing_wp_cron=1785357653.2269680500030517578125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 104.168.28.15 - - - 500 MISS - - [29/Jul/2026:20:40:53 +0000] "GET / HTTP/1.1" 3573 "-" "Mozilla/5.0 (Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" "104.168.28.15, 104.168.28.15, 104.168.28.15, 104.168.28.15" 104.168.28.15 - - - 404 BYPASS - - [29/Jul/2026:20:41:02 +0000] "GET /favicon.ico HTTP/1.1" 469 "-" "Mozilla/5.0 (Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" "104.168.28.15, 104.168.28.15, 104.168.28.15, 104.168.28.15" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:20:48:06 +0000] "POST /wp-cron.php?doing_wp_cron=1785358085.6683080196380615234375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 213.171.211.213 - - - 200 BYPASS - - [29/Jul/2026:20:48:06 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "213.171.211.213, 213.171.211.213, 213.171.211.213, 213.171.211.213" 213.171.211.213 - _uid=0100007F06676A6A92F0672002555103 - 200 BYPASS - - [29/Jul/2026:20:48:12 +0000] "POST /wp-login.php HTTP/1.1" 2803 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "213.171.211.213, 213.171.211.213, 213.171.211.213, 213.171.211.213" 216.73.216.14 - _uid=0100007FE4286A6A8BF0B71F0248A903 - 200 HIT - - [29/Jul/2026:20:53:33 +0000] "GET /sitemap_index.xml HTTP/1.1" 1159 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "216.73.216.14, 216.73.216.14, 216.73.216.14, 216.73.216.14" 64.89.163.68 - - - 403 BYPASS - - [29/Jul/2026:21:04:55 +0000] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 404 BYPASS - - [29/Jul/2026:21:04:55 +0000] "POST /wp-plain.php HTTP/1.1" 376 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 403 BYPASS - - [29/Jul/2026:21:04:55 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 404 MISS - - [29/Jul/2026:21:04:56 +0000] "GET /vwfqtkcj.php?Fox=d3wL7 HTTP/1.1" 492 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 403 BYPASS - - [29/Jul/2026:21:04:56 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:21:04:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785359098.1178259849548339843750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 64.89.163.68 - - - 500 MISS - - [29/Jul/2026:21:04:58 +0000] "GET / HTTP/1.1" 3573 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:21:04:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785359098.6317269802093505859375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 64.89.163.68 - - - 403 BYPASS - - [29/Jul/2026:21:04:59 +0000] "GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/1.1" 467 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 500 BYPASS - - [29/Jul/2026:21:04:59 +0000] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 3392 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 404 HIT - - [29/Jul/2026:21:04:59 +0000] "GET /plugins/content/apismtp/apismtp.php?test=hello HTTP/1.1" 491 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 500 BYPASS - - [29/Jul/2026:21:05:01 +0000] "POST /alfacgiapi/perl.alfa HTTP/1.1" 3392 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 500 MISS - - [29/Jul/2026:21:05:01 +0000] "GET /wp-content/plugins/apikey/apikey.php.suspected?test=hello HTTP/1.1" 3390 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 500 MISS - - [29/Jul/2026:21:05:03 +0000] "GET /plugins/content/apismtp/apismtp.php.suspected?test=hello HTTP/1.1" 3390 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 194.5.48.200 - - - 403 BYPASS - - [29/Jul/2026:21:06:24 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.200, 194.5.48.200, 194.5.48.200, 194.5.48.200" 194.5.48.198 - - - 403 BYPASS - - [29/Jul/2026:21:06:24 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.198, 194.5.48.198, 194.5.48.198, 194.5.48.198" 194.5.48.199 - - - 403 BYPASS - - [29/Jul/2026:21:06:24 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.199, 194.5.48.199, 194.5.48.199, 194.5.48.199" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:21:13:37 +0000] "POST /wp-cron.php?doing_wp_cron=1785359616.7473371028900146484375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 185.61.152.44 - - - 200 BYPASS - - [29/Jul/2026:21:13:37 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "185.61.152.44, 185.61.152.44, 185.61.152.44, 185.61.152.44" 185.61.152.44 - _uid=0100007F016D6A6A92F06720021F5303 - 200 BYPASS - - [29/Jul/2026:21:13:38 +0000] "POST /wp-login.php HTTP/1.1" 2806 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "185.61.152.44, 185.61.152.44, 185.61.152.44, 185.61.152.44" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:21:16:14 +0000] "POST /wp-cron.php?doing_wp_cron=1785359773.5417180061340332031250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 184.168.126.180 - - - 200 BYPASS - - [29/Jul/2026:21:16:14 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "184.168.126.180, 184.168.126.180, 184.168.126.180, 184.168.126.180" 184.168.126.180 - _uid=0100007F9E6D6A6A8BF0B71F02C7D203 - 200 BYPASS - - [29/Jul/2026:21:16:19 +0000] "POST /wp-login.php HTTP/1.1" 2803 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "184.168.126.180, 184.168.126.180, 184.168.126.180, 184.168.126.180" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:21:17:56 +0000] "POST /wp-cron.php?doing_wp_cron=1785359875.5290589332580566406250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 216.73.216.14 - - - 500 MISS - - [29/Jul/2026:21:17:56 +0000] "GET / HTTP/1.1" 3573 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "216.73.216.14, 216.73.216.14, 216.73.216.14, 216.73.216.14" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:21:38:20 +0000] "POST /wp-cron.php?doing_wp_cron=1785361099.7027089595794677734375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 157.66.26.183 - - - 200 BYPASS - - [29/Jul/2026:21:38:20 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "157.66.26.183, 157.66.26.183, 157.66.26.183, 157.66.26.183" 157.66.26.183 - _uid=0100007FCC726A6A8BF0B71F02F5D503 - 200 BYPASS - - [29/Jul/2026:21:38:25 +0000] "POST /wp-login.php HTTP/1.1" 2803 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "157.66.26.183, 157.66.26.183, 157.66.26.183, 157.66.26.183" 194.5.48.162 - - - 403 BYPASS - - [29/Jul/2026:21:43:41 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.162, 194.5.48.162, 194.5.48.162, 194.5.48.162" 194.5.48.161 - - - 403 BYPASS - - [29/Jul/2026:21:43:41 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.161, 194.5.48.161, 194.5.48.161, 194.5.48.161" 194.5.48.167 - - - 403 BYPASS - - [29/Jul/2026:21:43:41 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.167, 194.5.48.167, 194.5.48.167, 194.5.48.167" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:21:48:34 +0000] "POST /wp-cron.php?doing_wp_cron=1785361713.9854950904846191406250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 185.252.86.65 - - - 200 BYPASS - - [29/Jul/2026:21:48:34 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "185.252.86.65, 185.252.86.65, 185.252.86.65, 185.252.86.65" 185.252.86.65 - _uid=0100007F32756A6A8BF0B71F0283D703 - 200 BYPASS - - [29/Jul/2026:21:48:35 +0000] "POST /wp-login.php HTTP/1.1" 2806 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "185.252.86.65, 185.252.86.65, 185.252.86.65, 185.252.86.65" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:14 +0000] "GET /admin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:14 +0000] "GET /edit.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:14 +0000] "GET /w.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:15 +0000] "GET /file.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:15 +0000] "GET /adminfuns.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:15 +0000] "GET /aa.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:15 +0000] "GET /classwithtostring.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:16 +0000] "GET /about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:16 +0000] "GET /goods.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:16 +0000] "GET /php8.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:16 +0000] "GET /info.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:17 +0000] "GET /chosen.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:17 +0000] "GET /simple.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:17 +0000] "GET /ioxi-o.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:18 +0000] "GET /av.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 301 BYPASS - - [29/Jul/2026:22:00:18 +0000] "GET /wp-admin HTTP/1.1" 496 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:18 +0000] "GET /wp.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:18 +0000] "GET /file2.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:19 +0000] "GET /images/class-config.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:19 +0000] "GET /alfa.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:19 +0000] "GET /1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:19 +0000] "GET /222.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:20 +0000] "GET /asasx.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:20 +0000] "GET /filemanager.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:20 +0000] "GET /themes.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 403 BYPASS - - [29/Jul/2026:22:00:20 +0000] "GET /wp-content/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:21 +0000] "GET /buy.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:21 +0000] "GET /dropdown.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:21 +0000] "GET /inputs.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:21 +0000] "GET /100.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:22 +0000] "GET /akc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:22 +0000] "GET /autoload_classmap/function.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:22 +0000] "GET /php.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:22 +0000] "GET /t.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:23 +0000] "GET /index/function.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:23 +0000] "GET /wk/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:23 +0000] "GET /wp-blink.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:23 +0000] "GET /xfun.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:24 +0000] "GET /p.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 403 BYPASS - - [29/Jul/2026:22:00:24 +0000] "GET /wp-content/themes/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:24 +0000] "GET /aaa.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:24 +0000] "GET /term.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:25 +0000] "GET /7.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:25 +0000] "GET /file5.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:25 +0000] "GET /makeasmtp.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 403 BYPASS - - [29/Jul/2026:22:00:25 +0000] "GET /wp-content/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:26 +0000] "GET /atomlib.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:26 +0000] "GET /min.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:26 +0000] "GET /mac.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:22:00:26 +0000] "GET /nc4.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:01:43 +0000] "POST /wp-cron.php?doing_wp_cron=1785362502.4718480110168457031250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:01:43 +0000] "POST /wp-cron.php?doing_wp_cron=1785362503.1790890693664550781250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:01:44 +0000] "POST /wp-cron.php?doing_wp_cron=1785362503.8222010135650634765625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 65.111.26.76 - - - 301 MISS - - [29/Jul/2026:22:01:44 +0000] "GET /?author=1 HTTP/1.1" 417 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" "65.111.26.76, 65.111.26.76, 65.111.26.76, 65.111.26.76" 65.111.26.85 - - - 301 MISS - - [29/Jul/2026:22:01:45 +0000] "GET /?author=2 HTTP/1.1" 417 "https://wordpress.org/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" "65.111.26.85, 65.111.26.85, 65.111.26.85, 65.111.26.85" 216.26.247.109 - - - 500 MISS - - [29/Jul/2026:22:01:46 +0000] "GET /?author=3 HTTP/1.1" 3512 "https://www.bing.com/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0" "216.26.247.109, 216.26.247.109, 216.26.247.109, 216.26.247.109" 45.3.44.251 - - - 500 MISS - - [29/Jul/2026:22:01:47 +0000] "GET /?author=4 HTTP/1.1" 3390 "https://www.facebook.com/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "45.3.44.251, 45.3.44.251, 45.3.44.251, 45.3.44.251" 45.3.44.123 - - - 500 MISS - - [29/Jul/2026:22:01:49 +0000] "GET /?author=5 HTTP/1.1" 3512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "45.3.44.123, 45.3.44.123, 45.3.44.123, 45.3.44.123" 216.26.247.67 - - - 200 BYPASS - - [29/Jul/2026:22:01:50 +0000] "GET /wp-json/wp/v2/users HTTP/1.1" 1260 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" "216.26.247.67, 216.26.247.67, 216.26.247.67, 216.26.247.67" 65.111.26.251 - - - 403 BYPASS - - [29/Jul/2026:22:01:51 +0000] "GET /xmlrpc.php HTTP/1.1" 385 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.0" "65.111.26.251, 65.111.26.251, 65.111.26.251, 65.111.26.251" 216.26.247.84 - - - 200 BYPASS - - [29/Jul/2026:22:01:52 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "216.26.247.84, 216.26.247.84, 216.26.247.84, 216.26.247.84" 45.3.44.184 - - - 200 BYPASS - - [29/Jul/2026:22:01:57 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "45.3.44.184, 45.3.44.184, 45.3.44.184, 45.3.44.184" 65.111.26.18 - - - 200 BYPASS - - [29/Jul/2026:22:01:58 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" "65.111.26.18, 65.111.26.18, 65.111.26.18, 65.111.26.18" 45.3.44.69 - - - 200 BYPASS - - [29/Jul/2026:22:01:59 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" "45.3.44.69, 45.3.44.69, 45.3.44.69, 45.3.44.69" 216.26.247.192 - - - 200 BYPASS - - [29/Jul/2026:22:02:00 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" "216.26.247.192, 216.26.247.192, 216.26.247.192, 216.26.247.192" 209.50.184.235 - - - 200 BYPASS - - [29/Jul/2026:22:02:01 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:119.0) Gecko/20100101 Firefox/119.0" "209.50.184.235, 209.50.184.235, 209.50.184.235, 209.50.184.235" 209.50.184.151 - - - 200 BYPASS - - [29/Jul/2026:22:02:03 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" "209.50.184.151, 209.50.184.151, 209.50.184.151, 209.50.184.151" 216.26.247.176 - - - 200 BYPASS - - [29/Jul/2026:22:02:07 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:121.0) Gecko/20100101 Firefox/121.0" "216.26.247.176, 216.26.247.176, 216.26.247.176, 216.26.247.176" 216.26.247.155 - - - 200 BYPASS - - [29/Jul/2026:22:02:08 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "216.26.247.155, 216.26.247.155, 216.26.247.155, 216.26.247.155" 216.26.247.130 - - - 200 BYPASS - - [29/Jul/2026:22:02:09 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "216.26.247.130, 216.26.247.130, 216.26.247.130, 216.26.247.130" 209.50.184.125 - - - 200 BYPASS - - [29/Jul/2026:22:02:10 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "209.50.184.125, 209.50.184.125, 209.50.184.125, 209.50.184.125" 216.26.247.162 - - - 200 BYPASS - - [29/Jul/2026:22:02:12 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0" "216.26.247.162, 216.26.247.162, 216.26.247.162, 216.26.247.162" 65.111.26.76 - - - 200 BYPASS - - [29/Jul/2026:22:02:13 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0" "65.111.26.76, 65.111.26.76, 65.111.26.76, 65.111.26.76" 216.26.247.3 - - - 200 BYPASS - - [29/Jul/2026:22:02:14 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" "216.26.247.3, 216.26.247.3, 216.26.247.3, 216.26.247.3" 65.111.26.168 - - - 200 BYPASS - - [29/Jul/2026:22:02:15 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:118.0) Gecko/20100101 Firefox/118.0" "65.111.26.168, 65.111.26.168, 65.111.26.168, 65.111.26.168" 216.26.247.108 - - - 200 BYPASS - - [29/Jul/2026:22:02:17 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" "216.26.247.108, 216.26.247.108, 216.26.247.108, 216.26.247.108" 65.111.26.99 - - - 200 BYPASS - - [29/Jul/2026:22:02:18 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "65.111.26.99, 65.111.26.99, 65.111.26.99, 65.111.26.99" 45.3.44.5 - - - 200 BYPASS - - [29/Jul/2026:22:02:19 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "45.3.44.5, 45.3.44.5, 45.3.44.5, 45.3.44.5" 209.50.184.57 - - - 200 BYPASS - - [29/Jul/2026:22:02:20 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "209.50.184.57, 209.50.184.57, 209.50.184.57, 209.50.184.57" 45.3.44.242 - - - 200 BYPASS - - [29/Jul/2026:22:02:21 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "45.3.44.242, 45.3.44.242, 45.3.44.242, 45.3.44.242" 209.50.184.144 - - - 200 BYPASS - - [29/Jul/2026:22:02:23 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" "209.50.184.144, 209.50.184.144, 209.50.184.144, 209.50.184.144" 216.26.247.83 - - - 200 BYPASS - - [29/Jul/2026:22:02:24 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0" "216.26.247.83, 216.26.247.83, 216.26.247.83, 216.26.247.83" 209.50.184.112 - - - 200 BYPASS - - [29/Jul/2026:22:02:25 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:121.0) Gecko/20100101 Firefox/121.0" "209.50.184.112, 209.50.184.112, 209.50.184.112, 209.50.184.112" 65.111.26.37 - - - 200 BYPASS - - [29/Jul/2026:22:02:29 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:118.0) Gecko/20100101 Firefox/118.0" "65.111.26.37, 65.111.26.37, 65.111.26.37, 65.111.26.37" 216.26.247.79 - - - 200 BYPASS - - [29/Jul/2026:22:02:30 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" "216.26.247.79, 216.26.247.79, 216.26.247.79, 216.26.247.79" 209.50.184.134 - - - 200 BYPASS - - [29/Jul/2026:22:02:31 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:119.0) Gecko/20100101 Firefox/119.0" "209.50.184.134, 209.50.184.134, 209.50.184.134, 209.50.184.134" 209.50.184.64 - - - 200 BYPASS - - [29/Jul/2026:22:02:33 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "209.50.184.64, 209.50.184.64, 209.50.184.64, 209.50.184.64" 65.111.26.238 - - - 200 BYPASS - - [29/Jul/2026:22:02:37 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" "65.111.26.238, 65.111.26.238, 65.111.26.238, 65.111.26.238" 65.111.26.220 - - - 200 BYPASS - - [29/Jul/2026:22:02:38 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:119.0) Gecko/20100101 Firefox/119.0" "65.111.26.220, 65.111.26.220, 65.111.26.220, 65.111.26.220" 65.111.26.114 - - - 200 BYPASS - - [29/Jul/2026:22:02:39 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "65.111.26.114, 65.111.26.114, 65.111.26.114, 65.111.26.114" 216.26.247.89 - - - 200 BYPASS - - [29/Jul/2026:22:02:41 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" "216.26.247.89, 216.26.247.89, 216.26.247.89, 216.26.247.89" 65.111.26.228 - - - 200 BYPASS - - [29/Jul/2026:22:02:42 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:119.0) Gecko/20100101 Firefox/119.0" "65.111.26.228, 65.111.26.228, 65.111.26.228, 65.111.26.228" 209.50.184.132 - - - 200 BYPASS - - [29/Jul/2026:22:02:43 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" "209.50.184.132, 209.50.184.132, 209.50.184.132, 209.50.184.132" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:02:45 +0000] "POST /wp-cron.php?doing_wp_cron=1785362564.8702719211578369140625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 209.50.184.110 - - - 200 BYPASS - - [29/Jul/2026:22:02:45 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" "209.50.184.110, 209.50.184.110, 209.50.184.110, 209.50.184.110" 209.50.184.125 - - - 200 BYPASS - - [29/Jul/2026:22:02:46 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" "209.50.184.125, 209.50.184.125, 209.50.184.125, 209.50.184.125" 65.111.26.127 - - - 200 BYPASS - - [29/Jul/2026:22:02:47 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "65.111.26.127, 65.111.26.127, 65.111.26.127, 65.111.26.127" 65.111.26.250 - - - 200 BYPASS - - [29/Jul/2026:22:02:49 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" "65.111.26.250, 65.111.26.250, 65.111.26.250, 65.111.26.250" 45.3.44.145 - - - 200 BYPASS - - [29/Jul/2026:22:02:50 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" "45.3.44.145, 45.3.44.145, 45.3.44.145, 45.3.44.145" 65.111.26.6 - - - 200 BYPASS - - [29/Jul/2026:22:02:54 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" "65.111.26.6, 65.111.26.6, 65.111.26.6, 65.111.26.6" 209.50.184.88 - - - 200 BYPASS - - [29/Jul/2026:22:02:55 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:118.0) Gecko/20100101 Firefox/118.0" "209.50.184.88, 209.50.184.88, 209.50.184.88, 209.50.184.88" 45.3.44.129 - - - 200 BYPASS - - [29/Jul/2026:22:02:56 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" "45.3.44.129, 45.3.44.129, 45.3.44.129, 45.3.44.129" 45.3.44.57 - - - 200 BYPASS - - [29/Jul/2026:22:02:57 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:119.0) Gecko/20100101 Firefox/119.0" "45.3.44.57, 45.3.44.57, 45.3.44.57, 45.3.44.57" 216.26.247.191 - - - 200 BYPASS - - [29/Jul/2026:22:02:59 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0" "216.26.247.191, 216.26.247.191, 216.26.247.191, 216.26.247.191" 216.26.247.161 - - - 200 BYPASS - - [29/Jul/2026:22:03:00 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "216.26.247.161, 216.26.247.161, 216.26.247.161, 216.26.247.161" 45.3.44.171 - - - 200 BYPASS - - [29/Jul/2026:22:03:01 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "45.3.44.171, 45.3.44.171, 45.3.44.171, 45.3.44.171" 65.111.26.222 - - - 200 BYPASS - - [29/Jul/2026:22:03:02 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" "65.111.26.222, 65.111.26.222, 65.111.26.222, 65.111.26.222" 216.26.247.212 - - - 200 BYPASS - - [29/Jul/2026:22:03:04 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "216.26.247.212, 216.26.247.212, 216.26.247.212, 216.26.247.212" 209.50.184.120 - - - 200 BYPASS - - [29/Jul/2026:22:03:05 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" "209.50.184.120, 209.50.184.120, 209.50.184.120, 209.50.184.120" 65.111.26.4 - - - 200 BYPASS - - [29/Jul/2026:22:03:06 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" "65.111.26.4, 65.111.26.4, 65.111.26.4, 65.111.26.4" 45.3.44.142 - - - 200 BYPASS - - [29/Jul/2026:22:03:07 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "45.3.44.142, 45.3.44.142, 45.3.44.142, 45.3.44.142" 65.111.26.0 - - - 200 BYPASS - - [29/Jul/2026:22:03:08 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" "65.111.26.0, 65.111.26.0, 65.111.26.0, 65.111.26.0" 209.50.184.102 - - - 200 BYPASS - - [29/Jul/2026:22:03:10 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" "209.50.184.102, 209.50.184.102, 209.50.184.102, 209.50.184.102" 45.3.44.234 - - - 200 BYPASS - - [29/Jul/2026:22:03:11 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "45.3.44.234, 45.3.44.234, 45.3.44.234, 45.3.44.234" 65.111.26.215 - - - 200 BYPASS - - [29/Jul/2026:22:03:15 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.0" "65.111.26.215, 65.111.26.215, 65.111.26.215, 65.111.26.215" 216.26.247.73 - - - 200 BYPASS - - [29/Jul/2026:22:03:16 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" "216.26.247.73, 216.26.247.73, 216.26.247.73, 216.26.247.73" 65.111.26.82 - - - 200 BYPASS - - [29/Jul/2026:22:03:17 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" "65.111.26.82, 65.111.26.82, 65.111.26.82, 65.111.26.82" 216.26.247.135 - - - 200 BYPASS - - [29/Jul/2026:22:03:19 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "216.26.247.135, 216.26.247.135, 216.26.247.135, 216.26.247.135" 65.111.26.4 - - - 200 BYPASS - - [29/Jul/2026:22:03:20 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:118.0) Gecko/20100101 Firefox/118.0" "65.111.26.4, 65.111.26.4, 65.111.26.4, 65.111.26.4" 65.111.26.59 - - - 200 BYPASS - - [29/Jul/2026:22:03:21 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:120.0) Gecko/20100101 Firefox/120.0" "65.111.26.59, 65.111.26.59, 65.111.26.59, 65.111.26.59" 216.26.247.205 - - - 200 BYPASS - - [29/Jul/2026:22:03:22 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "216.26.247.205, 216.26.247.205, 216.26.247.205, 216.26.247.205" 65.111.26.108 - - - 200 BYPASS - - [29/Jul/2026:22:03:23 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "65.111.26.108, 65.111.26.108, 65.111.26.108, 65.111.26.108" 209.50.184.225 - - - 200 BYPASS - - [29/Jul/2026:22:03:25 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "209.50.184.225, 209.50.184.225, 209.50.184.225, 209.50.184.225" 216.26.247.165 - - - 200 BYPASS - - [29/Jul/2026:22:03:29 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" "216.26.247.165, 216.26.247.165, 216.26.247.165, 216.26.247.165" 45.3.44.28 - - - 200 BYPASS - - [29/Jul/2026:22:03:39 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "45.3.44.28, 45.3.44.28, 45.3.44.28, 45.3.44.28" 216.26.247.148 - - - 200 BYPASS - - [29/Jul/2026:22:03:40 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "216.26.247.148, 216.26.247.148, 216.26.247.148, 216.26.247.148" 65.111.26.84 - - - 200 BYPASS - - [29/Jul/2026:22:03:41 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "65.111.26.84, 65.111.26.84, 65.111.26.84, 65.111.26.84" 65.111.26.98 - - - 200 BYPASS - - [29/Jul/2026:22:03:42 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "65.111.26.98, 65.111.26.98, 65.111.26.98, 65.111.26.98" 209.50.184.95 - - - 200 BYPASS - - [29/Jul/2026:22:03:44 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "209.50.184.95, 209.50.184.95, 209.50.184.95, 209.50.184.95" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:03:45 +0000] "POST /wp-cron.php?doing_wp_cron=1785362625.3111441135406494140625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 216.26.247.183 - - - 200 BYPASS - - [29/Jul/2026:22:03:46 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "216.26.247.183, 216.26.247.183, 216.26.247.183, 216.26.247.183" 216.26.247.17 - - - 200 BYPASS - - [29/Jul/2026:22:03:47 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "216.26.247.17, 216.26.247.17, 216.26.247.17, 216.26.247.17" 209.50.184.116 - - - 200 BYPASS - - [29/Jul/2026:22:03:48 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" "209.50.184.116, 209.50.184.116, 209.50.184.116, 209.50.184.116" 45.3.44.69 - - - 200 BYPASS - - [29/Jul/2026:22:03:49 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" "45.3.44.69, 45.3.44.69, 45.3.44.69, 45.3.44.69" 65.111.26.59 - - - 200 BYPASS - - [29/Jul/2026:22:03:50 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:119.0) Gecko/20100101 Firefox/119.0" "65.111.26.59, 65.111.26.59, 65.111.26.59, 65.111.26.59" 216.26.247.52 - - - 200 BYPASS - - [29/Jul/2026:22:03:51 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "216.26.247.52, 216.26.247.52, 216.26.247.52, 216.26.247.52" 216.26.247.102 - - - 200 BYPASS - - [29/Jul/2026:22:03:53 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" "216.26.247.102, 216.26.247.102, 216.26.247.102, 216.26.247.102" 45.3.44.223 - - - 200 BYPASS - - [29/Jul/2026:22:03:57 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" "45.3.44.223, 45.3.44.223, 45.3.44.223, 45.3.44.223" 209.50.184.7 - - - 200 BYPASS - - [29/Jul/2026:22:03:58 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "209.50.184.7, 209.50.184.7, 209.50.184.7, 209.50.184.7" 65.111.26.193 - - - 200 BYPASS - - [29/Jul/2026:22:03:59 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" "65.111.26.193, 65.111.26.193, 65.111.26.193, 65.111.26.193" 216.26.247.192 - - - 200 BYPASS - - [29/Jul/2026:22:04:00 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" "216.26.247.192, 216.26.247.192, 216.26.247.192, 216.26.247.192" 45.3.44.147 - - - 200 BYPASS - - [29/Jul/2026:22:04:02 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:120.0) Gecko/20100101 Firefox/120.0" "45.3.44.147, 45.3.44.147, 45.3.44.147, 45.3.44.147" 209.50.184.115 - - - 200 BYPASS - - [29/Jul/2026:22:04:03 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "209.50.184.115, 209.50.184.115, 209.50.184.115, 209.50.184.115" 45.3.44.116 - - - 200 BYPASS - - [29/Jul/2026:22:04:13 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:120.0) Gecko/20100101 Firefox/120.0" "45.3.44.116, 45.3.44.116, 45.3.44.116, 45.3.44.116" 216.26.247.235 - - - 200 BYPASS - - [29/Jul/2026:22:04:14 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "216.26.247.235, 216.26.247.235, 216.26.247.235, 216.26.247.235" 216.26.247.109 - - - 200 BYPASS - - [29/Jul/2026:22:04:15 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" "216.26.247.109, 216.26.247.109, 216.26.247.109, 216.26.247.109" 209.50.184.126 - - - 200 BYPASS - - [29/Jul/2026:22:04:17 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" "209.50.184.126, 209.50.184.126, 209.50.184.126, 209.50.184.126" 216.26.247.134 - - - 200 BYPASS - - [29/Jul/2026:22:04:27 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:119.0) Gecko/20100101 Firefox/119.0" "216.26.247.134, 216.26.247.134, 216.26.247.134, 216.26.247.134" 45.3.44.166 - - - 200 BYPASS - - [29/Jul/2026:22:04:31 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0" "45.3.44.166, 45.3.44.166, 45.3.44.166, 45.3.44.166" 216.26.247.15 - - - 200 BYPASS - - [29/Jul/2026:22:04:32 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "216.26.247.15, 216.26.247.15, 216.26.247.15, 216.26.247.15" 216.26.247.2 - - - 200 BYPASS - - [29/Jul/2026:22:04:34 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" "216.26.247.2, 216.26.247.2, 216.26.247.2, 216.26.247.2" 65.111.26.247 - - - 200 BYPASS - - [29/Jul/2026:22:04:38 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "65.111.26.247, 65.111.26.247, 65.111.26.247, 65.111.26.247" 209.50.184.12 - - - 200 BYPASS - - [29/Jul/2026:22:04:39 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "209.50.184.12, 209.50.184.12, 209.50.184.12, 209.50.184.12" 65.111.26.75 - - - 200 BYPASS - - [29/Jul/2026:22:04:40 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "65.111.26.75, 65.111.26.75, 65.111.26.75, 65.111.26.75" 45.3.44.144 - - - 200 BYPASS - - [29/Jul/2026:22:04:41 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:119.0) Gecko/20100101 Firefox/119.0" "45.3.44.144, 45.3.44.144, 45.3.44.144, 45.3.44.144" 209.50.184.254 - - - 200 BYPASS - - [29/Jul/2026:22:04:43 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "209.50.184.254, 209.50.184.254, 209.50.184.254, 209.50.184.254" 209.50.184.118 - - - 200 BYPASS - - [29/Jul/2026:22:04:44 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "209.50.184.118, 209.50.184.118, 209.50.184.118, 209.50.184.118" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:04:55 +0000] "POST /wp-cron.php?doing_wp_cron=1785362694.5648169517517089843750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 45.3.44.22 - - - 200 BYPASS - - [29/Jul/2026:22:04:55 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "45.3.44.22, 45.3.44.22, 45.3.44.22, 45.3.44.22" 216.26.247.2 - - - 200 BYPASS - - [29/Jul/2026:22:05:05 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:118.0) Gecko/20100101 Firefox/118.0" "216.26.247.2, 216.26.247.2, 216.26.247.2, 216.26.247.2" 45.3.44.42 - - - 200 BYPASS - - [29/Jul/2026:22:05:06 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" "45.3.44.42, 45.3.44.42, 45.3.44.42, 45.3.44.42" 209.50.184.246 - - - 200 BYPASS - - [29/Jul/2026:22:05:07 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:119.0) Gecko/20100101 Firefox/119.0" "209.50.184.246, 209.50.184.246, 209.50.184.246, 209.50.184.246" 45.3.44.126 - - - 200 BYPASS - - [29/Jul/2026:22:05:09 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" "45.3.44.126, 45.3.44.126, 45.3.44.126, 45.3.44.126" 216.26.247.247 - - - 200 BYPASS - - [29/Jul/2026:22:05:19 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "216.26.247.247, 216.26.247.247, 216.26.247.247, 216.26.247.247" 216.26.247.212 - - - 200 BYPASS - - [29/Jul/2026:22:05:20 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" "216.26.247.212, 216.26.247.212, 216.26.247.212, 216.26.247.212" 65.111.26.125 - - - 200 BYPASS - - [29/Jul/2026:22:05:21 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" "65.111.26.125, 65.111.26.125, 65.111.26.125, 65.111.26.125" 216.26.247.113 - - - 200 BYPASS - - [29/Jul/2026:22:05:22 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0" "216.26.247.113, 216.26.247.113, 216.26.247.113, 216.26.247.113" 216.26.247.209 - - - 200 BYPASS - - [29/Jul/2026:22:05:24 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:119.0) Gecko/20100101 Firefox/119.0" "216.26.247.209, 216.26.247.209, 216.26.247.209, 216.26.247.209" 216.26.247.160 - - - 200 BYPASS - - [29/Jul/2026:22:05:25 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "216.26.247.160, 216.26.247.160, 216.26.247.160, 216.26.247.160" 209.50.184.136 - - - 200 BYPASS - - [29/Jul/2026:22:05:26 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:118.0) Gecko/20100101 Firefox/118.0" "209.50.184.136, 209.50.184.136, 209.50.184.136, 209.50.184.136" 209.50.184.237 - - - 200 BYPASS - - [29/Jul/2026:22:05:28 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "209.50.184.237, 209.50.184.237, 209.50.184.237, 209.50.184.237" 216.26.247.209 - - - 200 BYPASS - - [29/Jul/2026:22:05:29 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "216.26.247.209, 216.26.247.209, 216.26.247.209, 216.26.247.209" 65.111.26.11 - - - 200 BYPASS - - [29/Jul/2026:22:05:30 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.0" "65.111.26.11, 65.111.26.11, 65.111.26.11, 65.111.26.11" 65.111.26.236 - - - 200 BYPASS - - [29/Jul/2026:22:05:31 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" "65.111.26.236, 65.111.26.236, 65.111.26.236, 65.111.26.236" 216.26.247.4 - - - 200 BYPASS - - [29/Jul/2026:22:05:33 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "216.26.247.4, 216.26.247.4, 216.26.247.4, 216.26.247.4" 45.3.44.85 - - - 200 BYPASS - - [29/Jul/2026:22:05:34 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "45.3.44.85, 45.3.44.85, 45.3.44.85, 45.3.44.85" 216.26.247.165 - - - 200 BYPASS - - [29/Jul/2026:22:05:35 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0" "216.26.247.165, 216.26.247.165, 216.26.247.165, 216.26.247.165" 216.26.247.50 - - - 200 BYPASS - - [29/Jul/2026:22:05:37 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" "216.26.247.50, 216.26.247.50, 216.26.247.50, 216.26.247.50" 216.26.247.233 - - - 200 BYPASS - - [29/Jul/2026:22:05:38 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:119.0) Gecko/20100101 Firefox/119.0" "216.26.247.233, 216.26.247.233, 216.26.247.233, 216.26.247.233" 216.26.247.225 - - - 200 BYPASS - - [29/Jul/2026:22:05:42 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" "216.26.247.225, 216.26.247.225, 216.26.247.225, 216.26.247.225" 216.26.247.245 - - - 200 BYPASS - - [29/Jul/2026:22:05:43 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" "216.26.247.245, 216.26.247.245, 216.26.247.245, 216.26.247.245" 216.26.247.1 - - - 200 BYPASS - - [29/Jul/2026:22:05:44 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" "216.26.247.1, 216.26.247.1, 216.26.247.1, 216.26.247.1" 45.3.44.91 - - - 200 BYPASS - - [29/Jul/2026:22:05:46 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "45.3.44.91, 45.3.44.91, 45.3.44.91, 45.3.44.91" 65.111.26.15 - - - 200 BYPASS - - [29/Jul/2026:22:05:47 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" "65.111.26.15, 65.111.26.15, 65.111.26.15, 65.111.26.15" 216.26.247.61 - - - 200 BYPASS - - [29/Jul/2026:22:05:48 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" "216.26.247.61, 216.26.247.61, 216.26.247.61, 216.26.247.61" 216.26.247.169 - - - 200 BYPASS - - [29/Jul/2026:22:05:49 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "216.26.247.169, 216.26.247.169, 216.26.247.169, 216.26.247.169" 65.111.26.38 - - - 200 BYPASS - - [29/Jul/2026:22:05:50 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" "65.111.26.38, 65.111.26.38, 65.111.26.38, 65.111.26.38" 45.3.44.184 - - - 200 BYPASS - - [29/Jul/2026:22:05:52 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" "45.3.44.184, 45.3.44.184, 45.3.44.184, 45.3.44.184" 209.50.184.219 - - - 200 BYPASS - - [29/Jul/2026:22:05:53 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" "209.50.184.219, 209.50.184.219, 209.50.184.219, 209.50.184.219" 45.3.44.221 - - - 200 BYPASS - - [29/Jul/2026:22:05:54 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0" "45.3.44.221, 45.3.44.221, 45.3.44.221, 45.3.44.221" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:05:56 +0000] "POST /wp-cron.php?doing_wp_cron=1785362755.6343729496002197265625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 45.3.44.101 - - - 200 BYPASS - - [29/Jul/2026:22:05:56 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "45.3.44.101, 45.3.44.101, 45.3.44.101, 45.3.44.101" 216.26.247.97 - - - 200 BYPASS - - [29/Jul/2026:22:05:57 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "216.26.247.97, 216.26.247.97, 216.26.247.97, 216.26.247.97" 65.111.26.83 - - - 200 BYPASS - - [29/Jul/2026:22:05:58 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:119.0) Gecko/20100101 Firefox/119.0" "65.111.26.83, 65.111.26.83, 65.111.26.83, 65.111.26.83" 216.26.247.20 - - - 200 BYPASS - - [29/Jul/2026:22:05:59 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "216.26.247.20, 216.26.247.20, 216.26.247.20, 216.26.247.20" 216.26.247.246 - - - 200 BYPASS - - [29/Jul/2026:22:06:01 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" "216.26.247.246, 216.26.247.246, 216.26.247.246, 216.26.247.246" 45.3.44.30 - - - 200 BYPASS - - [29/Jul/2026:22:06:02 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "45.3.44.30, 45.3.44.30, 45.3.44.30, 45.3.44.30" 209.50.184.224 - - - 200 BYPASS - - [29/Jul/2026:22:06:03 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "209.50.184.224, 209.50.184.224, 209.50.184.224, 209.50.184.224" 45.3.44.111 - - - 200 BYPASS - - [29/Jul/2026:22:06:04 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0" "45.3.44.111, 45.3.44.111, 45.3.44.111, 45.3.44.111" 65.111.26.136 - - - 200 BYPASS - - [29/Jul/2026:22:06:06 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:118.0) Gecko/20100101 Firefox/118.0" "65.111.26.136, 65.111.26.136, 65.111.26.136, 65.111.26.136" 65.111.26.200 - - - 200 BYPASS - - [29/Jul/2026:22:06:07 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "65.111.26.200, 65.111.26.200, 65.111.26.200, 65.111.26.200" 216.26.247.21 - - - 200 BYPASS - - [29/Jul/2026:22:06:08 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0" "216.26.247.21, 216.26.247.21, 216.26.247.21, 216.26.247.21" 209.50.184.43 - - - 200 BYPASS - - [29/Jul/2026:22:06:09 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" "209.50.184.43, 209.50.184.43, 209.50.184.43, 209.50.184.43" 65.111.26.46 - - - 200 BYPASS - - [29/Jul/2026:22:06:10 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0" "65.111.26.46, 65.111.26.46, 65.111.26.46, 65.111.26.46" 216.26.247.58 - - - 200 BYPASS - - [29/Jul/2026:22:06:11 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:119.0) Gecko/20100101 Firefox/119.0" "216.26.247.58, 216.26.247.58, 216.26.247.58, 216.26.247.58" 65.111.26.236 - - - 200 BYPASS - - [29/Jul/2026:22:06:13 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0" "65.111.26.236, 65.111.26.236, 65.111.26.236, 65.111.26.236" 45.3.44.75 - - - 200 BYPASS - - [29/Jul/2026:22:06:14 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "45.3.44.75, 45.3.44.75, 45.3.44.75, 45.3.44.75" 65.111.26.178 - - - 200 BYPASS - - [29/Jul/2026:22:06:15 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:119.0) Gecko/20100101 Firefox/119.0" "65.111.26.178, 65.111.26.178, 65.111.26.178, 65.111.26.178" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:08:10 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=e5dcf70ab0 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:08:10 +0000] "POST /wp-cron.php?doing_wp_cron=1785362890.3480210304260253906250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 104.64.221.171 - - - 302 BYPASS - - [29/Jul/2026:22:08:10 +0000] "GET /wp-admin/ HTTP/1.1" 599 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.0" "104.64.221.171, 104.64.221.171, 104.64.221.171, 104.64.221.171" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:12:47 +0000] "POST /wp-cron.php?doing_wp_cron=1785363166.9678959846496582031250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 185.252.86.65 - - - 200 BYPASS - - [29/Jul/2026:22:12:47 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "185.252.86.65, 185.252.86.65, 185.252.86.65, 185.252.86.65" 185.252.86.65 - _uid=0100007FDF7A6A6A8BF0B71F0220DB03 - 200 BYPASS - - [29/Jul/2026:22:12:52 +0000] "POST /wp-login.php HTTP/1.1" 2803 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "185.252.86.65, 185.252.86.65, 185.252.86.65, 185.252.86.65" 20.9.4.9 - - - 403 BYPASS - - [29/Jul/2026:22:27:36 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 385 "-" "-" "20.9.4.9, 20.9.4.9, 20.9.4.9, 20.9.4.9" 194.5.48.200 - - - 403 BYPASS - - [29/Jul/2026:22:51:58 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.200, 194.5.48.200, 194.5.48.200, 194.5.48.200" 194.5.48.202 - - - 403 BYPASS - - [29/Jul/2026:22:51:58 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.202, 194.5.48.202, 194.5.48.202, 194.5.48.202" 194.5.48.208 - - - 403 BYPASS - - [29/Jul/2026:22:51:58 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.208, 194.5.48.208, 194.5.48.208, 194.5.48.208" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:53:49 +0000] "POST /wp-cron.php?doing_wp_cron=1785365628.6279940605163574218750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 212.80.9.235 - - - 200 BYPASS - - [29/Jul/2026:22:53:49 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "212.80.9.235, 212.80.9.235, 212.80.9.235, 212.80.9.235" 212.80.9.235 - _uid=0100007F7D846A6A8BF0B71F0291DF03 - 200 BYPASS - - [29/Jul/2026:22:53:53 +0000] "POST /wp-login.php HTTP/1.1" 2803 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "212.80.9.235, 212.80.9.235, 212.80.9.235, 212.80.9.235" 20.100.173.28 - - - 403 BYPASS - - [29/Jul/2026:22:54:31 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 385 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - - - 404 MISS - - [29/Jul/2026:22:54:32 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 433 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FC7C4696A8BF0B71F02E46403 - 404 MISS - - [29/Jul/2026:22:54:34 +0000] "GET /xstelth.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007F7038696A6022FC3A02FDF003 - 404 MISS - - [29/Jul/2026:22:54:36 +0000] "GET /584062352875874akp.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - - - 404 MISS - - [29/Jul/2026:22:54:38 +0000] "GET /newfile.php HTTP/1.1" 433 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - - - 404 MISS - - [29/Jul/2026:22:54:38 +0000] "GET /tBEZGQz.php HTTP/1.1" 433 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - - - 500 MISS - - [29/Jul/2026:22:54:40 +0000] "GET /phpinfo?re@=vo@ HTTP/1.1" 3390 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FB0846A6A92F0672002C95503 - 404 MISS - - [29/Jul/2026:22:54:41 +0000] "GET //drykl.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FB0846A6A92F0672002C95503 - 403 BYPASS - - [29/Jul/2026:22:54:44 +0000] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 297 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FB0846A6A92F0672002C95503 - 404 MISS - - [29/Jul/2026:22:54:45 +0000] "GET /ls.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FB0846A6A92F0672002C95503 - 404 MISS - - [29/Jul/2026:22:54:48 +0000] "GET /dx.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FB0846A6A92F0672002C95503 - 404 HIT - - [29/Jul/2026:22:54:49 +0000] "GET /mac.php HTTP/1.1" 403 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FFA776A6A8BF0B71F0203D903 - 404 MISS - - [29/Jul/2026:22:54:50 +0000] "GET /485.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FFA776A6A8BF0B71F0203D903 - 404 MISS - - [29/Jul/2026:22:54:52 +0000] "GET /gelio1.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FFA776A6A8BF0B71F0203D903 - 404 MISS - - [29/Jul/2026:22:54:54 +0000] "GET /lp6.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FFA776A6A8BF0B71F0203D903 - 404 BYPASS - - [29/Jul/2026:22:54:55 +0000] "GET /wp-admin/maint/admin.php HTTP/1.1" 299 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FFA776A6A8BF0B71F0203D903 - 403 BYPASS - - [29/Jul/2026:22:54:56 +0000] "GET /wp-includes/sodium_compat/ HTTP/1.1" 297 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FFA776A6A8BF0B71F0203D903 - 404 MISS - - [29/Jul/2026:22:54:59 +0000] "GET /w3llscc.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FFA776A6A8BF0B71F0203D903 - 404 MISS - - [29/Jul/2026:22:55:00 +0000] "GET /miru3.php?p= HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FFA776A6A8BF0B71F0203D903 - 404 MISS - - [29/Jul/2026:22:55:02 +0000] "GET /autoload_classmap.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007F86E6696A92F0672002C43E03 - 403 BYPASS - - [29/Jul/2026:22:55:02 +0000] "GET /wp-content/ HTTP/1.1" 297 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007F86E6696A92F0672002C43E03 - 403 BYPASS - - [29/Jul/2026:22:55:05 +0000] "GET /wp-content/themes/index.php HTTP/1.1" 297 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007F86E6696A92F0672002C43E03 - 404 MISS - - [29/Jul/2026:22:55:06 +0000] "GET //av.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007F86E6696A92F0672002C43E03 - 403 BYPASS - - [29/Jul/2026:22:55:07 +0000] "GET //wp-includes/l10n/ HTTP/1.1" 297 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:55:10 +0000] "POST /wp-cron.php?doing_wp_cron=1785365709.9180049896240234375000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 20.100.173.28 - _uid=0100007F86E6696A92F0672002C43E03 - 500 BYPASS - - [29/Jul/2026:22:55:10 +0000] "GET /wordpress/wp-admin/maint/ HTTP/1.1" 3315 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007F86E6696A92F0672002C43E03 - 404 MISS - - [29/Jul/2026:22:55:13 +0000] "GET /tiny.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007F86E6696A92F0672002C43E03 - 404 MISS - - [29/Jul/2026:22:55:13 +0000] "GET /BsMPQ6Wavdefault.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - - - 404 MISS - - [29/Jul/2026:22:55:16 +0000] "GET /zrrhj.php HTTP/1.1" 433 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - - - 404 MISS - - [29/Jul/2026:22:55:17 +0000] "GET /gwaih1gfzp5vuwr04Cdefault.php HTTP/1.1" 433 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - - - 404 MISS - - [29/Jul/2026:22:55:18 +0000] "GET /wpgum.php HTTP/1.1" 433 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - - - 404 MISS - - [29/Jul/2026:22:55:21 +0000] "GET /ywwbf.php HTTP/1.1" 433 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - - - 404 MISS - - [29/Jul/2026:22:55:22 +0000] "GET /xoldj.php HTTP/1.1" 433 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - - - 404 MISS - - [29/Jul/2026:22:55:23 +0000] "GET //f35.php HTTP/1.1" 433 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - - - 404 MISS - - [29/Jul/2026:22:55:25 +0000] "GET /gk.php HTTP/1.1" 433 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - - - 404 MISS - - [29/Jul/2026:22:55:28 +0000] "GET /wper3.php HTTP/1.1" 433 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - - - 404 MISS - - [29/Jul/2026:22:55:31 +0000] "GET /bthil.php HTTP/1.1" 433 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - - - 404 MISS - - [29/Jul/2026:22:55:32 +0000] "GET /wyzer1.php HTTP/1.1" 433 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - - - 404 MISS - - [29/Jul/2026:22:55:33 +0000] "GET /mh.php HTTP/1.1" 433 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - - - 404 MISS - - [29/Jul/2026:22:55:33 +0000] "GET /gvg1bvpsgtot1rpklCdefault.php HTTP/1.1" 433 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - - - 404 HIT - - [29/Jul/2026:22:55:35 +0000] "GET /1.php HTTP/1.1" 491 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FF3776A6A8BF0B71F02E9D803 - 404 HIT - - [29/Jul/2026:22:55:36 +0000] "GET /chosen.php HTTP/1.1" 403 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FF1776A6A8BF0B71F02E0D803 - 404 MISS - - [29/Jul/2026:22:55:37 +0000] "GET /sd.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FF1776A6A8BF0B71F02E0D803 - 404 MISS - - [29/Jul/2026:22:55:38 +0000] "GET /z60.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - - - 404 MISS - - [29/Jul/2026:22:55:39 +0000] "GET /home.php HTTP/1.1" 433 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - - - 404 MISS - - [29/Jul/2026:22:55:40 +0000] "GET /ws58.php HTTP/1.1" 433 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - - - 404 MISS - - [29/Jul/2026:22:55:41 +0000] "GET /gulu.php HTTP/1.1" 433 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FED846A6A8BF0B71F02E2DF03 - 404 MISS - - [29/Jul/2026:22:55:42 +0000] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - - - 404 MISS - - [29/Jul/2026:22:55:45 +0000] "GET /wpls.php HTTP/1.1" 433 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - - - 404 HIT - - [29/Jul/2026:22:55:46 +0000] "GET /php.php HTTP/1.1" 491 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FF6776A6A8BF0B71F02F6D803 - 404 HIT - - [29/Jul/2026:22:55:48 +0000] "GET /100.php HTTP/1.1" 403 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FF5776A6A92F0672002F45403 - 404 MISS - - [29/Jul/2026:22:55:49 +0000] "GET /BDKR28WP.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FF5776A6A92F0672002F45403 - 404 MISS - - [29/Jul/2026:22:55:51 +0000] "GET /browse.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FF5776A6A92F0672002F45403 - 404 MISS - - [29/Jul/2026:22:55:52 +0000] "GET /wp-good.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FF5776A6A92F0672002F45403 - 404 MISS - - [29/Jul/2026:22:55:54 +0000] "GET /8573.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FF5776A6A92F0672002F45403 - 403 BYPASS - - [29/Jul/2026:22:55:56 +0000] "GET /wp-admin/install.php HTTP/1.1" 297 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FF5776A6A92F0672002F45403 - 404 HIT - - [29/Jul/2026:22:55:58 +0000] "GET /classwithtostring.php HTTP/1.1" 403 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FEF776A6A8BF0B71F02D9D803 - 404 MISS - - [29/Jul/2026:22:55:59 +0000] "GET /ohct.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FEF776A6A8BF0B71F02D9D803 - 404 MISS - - [29/Jul/2026:22:56:00 +0000] "GET /bless.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - - - 404 HIT - - [29/Jul/2026:22:56:00 +0000] "GET /about.php HTTP/1.1" 491 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FF0776A6A8BF0B71F02DAD803 - 404 MISS - - [29/Jul/2026:22:56:01 +0000] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FF0776A6A8BF0B71F02DAD803 - 404 MISS - - [29/Jul/2026:22:56:02 +0000] "GET /ta0ol.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FF0776A6A8BF0B71F02DAD803 - 500 MISS - - [29/Jul/2026:22:56:03 +0000] "GET /sa.php7 HTTP/1.1" 3302 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FF0776A6A8BF0B71F02DAD803 - 404 MISS - - [29/Jul/2026:22:56:04 +0000] "GET /wp-class.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FF0776A6A8BF0B71F02DAD803 - 404 MISS - - [29/Jul/2026:22:56:05 +0000] "GET /8.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FF0776A6A8BF0B71F02DAD803 - 404 MISS - - [29/Jul/2026:22:56:06 +0000] "GET /bootstrap.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FF0776A6A8BF0B71F02DAD803 - 404 MISS - - [29/Jul/2026:22:56:08 +0000] "GET /wp-blog-header.php HTTP/1.1" 382 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FF0776A6A8BF0B71F02DAD803 - 404 HIT - - [29/Jul/2026:22:56:10 +0000] "GET /aa.php HTTP/1.1" 403 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FEF776A6A92F0672002F25403 - 404 MISS - - [29/Jul/2026:22:56:11 +0000] "GET /tx79.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FEF776A6A92F0672002F25403 - 404 MISS - - [29/Jul/2026:22:56:13 +0000] "GET /motu.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - - - 404 MISS - - [29/Jul/2026:22:56:14 +0000] "GET /wp-head.php HTTP/1.1" 433 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 37.27.122.165 - _uid=0100007F0E856A6A8BF0B71F02F0DF03 - 200 BYPASS - - [29/Jul/2026:22:56:17 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=e5dcf70ab0 HTTP/1.1" 153 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:56:17 +0000] "POST /wp-cron.php?doing_wp_cron=1785365777.4230279922485351562500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 20.100.173.28 - _uid=0100007F0E856A6A8BF0B71F02F0DF03 - 302 BYPASS - - [29/Jul/2026:22:56:18 +0000] "GET /wp-admin/options-privacy.php HTTP/1.1" 530 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007F0E856A6A8BF0B71F02F0DF03 - 200 BYPASS - - [29/Jul/2026:22:56:19 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlighthealthbenefits.com%2Fwp-admin%2Foptions-privacy.php&reauth=1 HTTP/1.1" 4753 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007F0E856A6A8BF0B71F02F0DF03 - 404 MISS - - [29/Jul/2026:22:56:20 +0000] "GET /60856e3a4findex.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007F0E856A6A8BF0B71F02F0DF03 - 404 MISS - - [29/Jul/2026:22:56:21 +0000] "GET /wp-the.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007F0E856A6A8BF0B71F02F0DF03 - 404 HIT - - [29/Jul/2026:22:56:23 +0000] "GET /wp.php HTTP/1.1" 403 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FF2776A6A8BF0B71F02E5D803 - 404 MISS - - [29/Jul/2026:22:56:23 +0000] "GET /users.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FF2776A6A8BF0B71F02E5D803 - 404 MISS - - [29/Jul/2026:22:56:25 +0000] "GET /tinysd.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FF2776A6A8BF0B71F02E5D803 - 404 MISS - - [29/Jul/2026:22:56:26 +0000] "GET /ws78.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FF2776A6A8BF0B71F02E5D803 - 404 MISS - - [29/Jul/2026:22:56:27 +0000] "GET /elp.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - - - 404 HIT - - [29/Jul/2026:22:56:28 +0000] "GET /atomlib.php HTTP/1.1" 491 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FFA776A6A8BF0B71F0200D903 - 404 MISS - - [29/Jul/2026:22:56:29 +0000] "GET /wyzer3.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FFA776A6A8BF0B71F0200D903 - 404 MISS - - [29/Jul/2026:22:56:30 +0000] "GET /max.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 20.100.173.28 - _uid=0100007FFA776A6A8BF0B71F0200D903 - 404 MISS - - [29/Jul/2026:22:56:32 +0000] "GET /ftde.php HTTP/1.1" 345 "-" "-" "20.100.173.28, 20.100.173.28, 20.100.173.28, 20.100.173.28" 198.38.94.87 - - - 200 BYPASS - - [29/Jul/2026:22:56:34 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.87, 198.38.94.87, 198.38.94.87, 198.38.94.87" 198.38.94.87 - _uid=0100007F22856A6A8BF0B71F02FDDF03 - 200 BYPASS - - [29/Jul/2026:22:56:35 +0000] "POST /wp-login.php HTTP/1.1" 2806 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.87, 198.38.94.87, 198.38.94.87, 198.38.94.87" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:59:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785365999.2077090740203857421875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 158.106.137.107 - - - 200 BYPASS - - [29/Jul/2026:22:59:59 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "158.106.137.107, 158.106.137.107, 158.106.137.107, 158.106.137.107" 158.106.137.107 - _uid=0100007FEF856A6A8BF0B71F02B3E003 - 200 BYPASS - - [29/Jul/2026:23:00:08 +0000] "POST /wp-login.php HTTP/1.1" 2806 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "158.106.137.107, 158.106.137.107, 158.106.137.107, 158.106.137.107" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:23:04:11 +0000] "POST /wp-cron.php?doing_wp_cron=1785366250.7225360870361328125000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 74.7.227.170 - - - 200 MISS - - [29/Jul/2026:23:04:11 +0000] "GET /sitemap_index.xml HTTP/1.1" 1267 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "74.7.227.170, 74.7.227.170, 74.7.227.170, 74.7.227.170" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:23:05:39 +0000] "POST /wp-cron.php?doing_wp_cron=1785366338.7137138843536376953125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 160.250.130.168 - - - 200 BYPASS - - [29/Jul/2026:23:05:39 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "160.250.130.168, 160.250.130.168, 160.250.130.168, 160.250.130.168" 160.250.130.168 - _uid=0100007F43876A6A8BF0B71F02A4E103 - 200 BYPASS - - [29/Jul/2026:23:05:40 +0000] "POST /wp-login.php HTTP/1.1" 2803 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "160.250.130.168, 160.250.130.168, 160.250.130.168, 160.250.130.168" 216.73.216.14 - _uid=0100007FE4286A6A8BF0B71F0248A903 - 200 HIT - - [29/Jul/2026:23:10:05 +0000] "GET /sitemap_index.xml HTTP/1.1" 1159 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "216.73.216.14, 216.73.216.14, 216.73.216.14, 216.73.216.14" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:23:17:07 +0000] "POST /wp-cron.php?doing_wp_cron=1785367027.0420920848846435546875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 152.53.111.131 - - - 200 BYPASS - - [29/Jul/2026:23:17:07 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "152.53.111.131, 152.53.111.131, 152.53.111.131, 152.53.111.131" 152.53.111.131 - _uid=0100007FF3896A6A8BF0B71F020AE503 - 200 BYPASS - - [29/Jul/2026:23:17:12 +0000] "POST /wp-login.php HTTP/1.1" 2803 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "152.53.111.131, 152.53.111.131, 152.53.111.131, 152.53.111.131" 194.5.48.176 - - - 403 BYPASS - - [29/Jul/2026:23:26:05 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.176, 194.5.48.176, 194.5.48.176, 194.5.48.176" 194.5.48.191 - - - 403 BYPASS - - [29/Jul/2026:23:26:05 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.191, 194.5.48.191, 194.5.48.191, 194.5.48.191" 194.5.48.176 - - - 403 BYPASS - - [29/Jul/2026:23:26:07 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.176, 194.5.48.176, 194.5.48.176, 194.5.48.176" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:11 +0000] "GET /inputs.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:11 +0000] "GET /admin.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:11 +0000] "GET /goods.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:12 +0000] "GET /file.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:12 +0000] "GET /adminfuns.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:12 +0000] "GET /404.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:12 +0000] "GET /wk/index.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:13 +0000] "GET /about.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:13 +0000] "GET /term.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:13 +0000] "GET /ioxi-o.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:13 +0000] "GET /1.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:14 +0000] "GET /alfa.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:14 +0000] "GET /edit.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:14 +0000] "GET /elp.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:14 +0000] "GET /classwithtostring.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:15 +0000] "GET /666.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:23:34:16 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=e5dcf70ab0 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:23:34:17 +0000] "POST /wp-cron.php?doing_wp_cron=1785368056.5933089256286621093750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 52.238.199.152 - - - 302 BYPASS - - [29/Jul/2026:23:34:17 +0000] "GET /wp-admin/ HTTP/1.1" 599 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:17 +0000] "GET /ws54.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:17 +0000] "GET /deepseek_d.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:18 +0000] "GET /function/function.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:18 +0000] "GET /nw.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:18 +0000] "GET /xleet.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:18 +0000] "GET /wp.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:19 +0000] "GET /155.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:19 +0000] "GET /96i.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:19 +0000] "GET /as.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:19 +0000] "GET /min.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:23:34:21 +0000] "POST /wp-cron.php?doing_wp_cron=1785368060.6085629463195800781250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:23:34:21 +0000] "POST /wp-cron.php?doing_wp_cron=1785368061.2696850299835205078125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 52.238.199.152 - - - 500 MISS - - [29/Jul/2026:23:34:22 +0000] "GET /.well-known/ HTTP/1.1" 3390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:22 +0000] "GET /php8.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 403 BYPASS - - [29/Jul/2026:23:34:22 +0000] "GET /wp-content/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:22 +0000] "GET /222.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 403 BYPASS - - [29/Jul/2026:23:34:23 +0000] "GET /wp-content/themes/pridmag/il.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:23 +0000] "GET /info.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:23 +0000] "GET /a.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:23 +0000] "GET /chosen.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 403 BYPASS - - [29/Jul/2026:23:34:24 +0000] "GET /wp-content/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:24 +0000] "GET /vx.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 500 MISS - - [29/Jul/2026:23:34:25 +0000] "GET /admin/controller/extension/ HTTP/1.1" 3390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:25 +0000] "GET /wap.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 BYPASS - - [29/Jul/2026:23:34:26 +0000] "GET /wp-admin/wp.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:26 +0000] "GET /bgymj.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:26 +0000] "GET /aa.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 403 MISS - - [29/Jul/2026:23:34:27 +0000] "GET /wp-mail.php HTTP/1.1" 1511 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:27 +0000] "GET /bolt.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:27 +0000] "GET /bthil.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 500 MISS - - [29/Jul/2026:23:34:28 +0000] "GET /cgi-bin/ HTTP/1.1" 3390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:29 +0000] "GET /x.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:29 +0000] "GET /index/function.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:29 +0000] "GET /aaa.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:29 +0000] "GET /abcd.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:30 +0000] "GET /wp-good.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:30 +0000] "GET /simple.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:30 +0000] "GET /edit-tags.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:30 +0000] "GET /u.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 403 BYPASS - - [29/Jul/2026:23:34:31 +0000] "GET /wp-content/themes/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:31 +0000] "GET /h.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:31 +0000] "GET /ms-edit.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:32 +0000] "GET /a7.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:32 +0000] "GET /manager.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:33 +0000] "GET /w1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 403 BYPASS - - [29/Jul/2026:23:34:33 +0000] "GET /wp-includes/fonts/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 200 BYPASS - - [29/Jul/2026:23:34:34 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:34 +0000] "GET /default.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:34 +0000] "GET /i.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 403 BYPASS - - [29/Jul/2026:23:34:35 +0000] "GET /wp-content/uploads/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:35 +0000] "GET /wp-includes/Requests/library/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 403 BYPASS - - [29/Jul/2026:23:34:35 +0000] "GET /wp-content/themes/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:36 +0000] "GET /gecko-new.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:36 +0000] "GET /NewFile.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:36 +0000] "GET /wp-Blogs.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:36 +0000] "GET /wp-includes/fonts/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:37 +0000] "GET /themes.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:37 +0000] "GET /cv.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 403 BYPASS - - [29/Jul/2026:23:34:37 +0000] "GET /wp-admin/js/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 403 BYPASS - - [29/Jul/2026:23:34:37 +0000] "GET /wp-content/uploads/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:38 +0000] "GET /ws83.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:38 +0000] "GET /atex1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:38 +0000] "GET /class-t.api.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:38 +0000] "GET /w.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:39 +0000] "GET /archive.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:39 +0000] "GET /bless.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:39 +0000] "GET /sagax1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:39 +0000] "GET /wpc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:40 +0000] "GET /fone1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:40 +0000] "GET /ncx.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 BYPASS - - [29/Jul/2026:23:34:40 +0000] "GET /wp-admin/js/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:41 +0000] "GET /wso.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 500 MISS - - [29/Jul/2026:23:34:42 +0000] "GET /zup.php73 HTTP/1.1" 3390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:42 +0000] "GET /k.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:42 +0000] "GET /wp-blink.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 500 MISS - - [29/Jul/2026:23:34:43 +0000] "GET /randkeyword.PhP7 HTTP/1.1" 3390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 403 BYPASS - - [29/Jul/2026:23:34:44 +0000] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 403 BYPASS - - [29/Jul/2026:23:34:44 +0000] "GET /wp-content/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:44 +0000] "GET /ww5.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:44 +0000] "GET /2.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 BYPASS - - [29/Jul/2026:23:34:45 +0000] "GET /wp-admin/classwithtostring.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:45 +0000] "GET /atomlib.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:23:34:45 +0000] "GET /rip.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:45 +0000] "GET /p.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:23:34:46 +0000] "GET /php.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:23:46:16 +0000] "POST /wp-cron.php?doing_wp_cron=1785368776.2309300899505615234375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 209.222.97.66 - - - 200 BYPASS - - [29/Jul/2026:23:46:16 +0000] "GET /wp-login.php HTTP/1.1" 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "209.222.97.66, 209.222.97.66, 209.222.97.66, 209.222.97.66" 209.222.97.66 - _uid=0100007FC8906A6A8BF0B71F0248ED03 - 200 BYPASS - - [29/Jul/2026:23:46:17 +0000] "POST /wp-login.php HTTP/1.1" 2806 "https://redlighthealthbenefits.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "209.222.97.66, 209.222.97.66, 209.222.97.66, 209.222.97.66" 216.73.216.14 - - - 200 HIT - - [29/Jul/2026:23:53:15 +0000] "GET /sitemap_index.xml HTTP/1.1" 1247 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "216.73.216.14, 216.73.216.14, 216.73.216.14, 216.73.216.14" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:23:58:40 +0000] "POST /wp-cron.php?doing_wp_cron=1785369519.5909240245819091796875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlighthealthbenefits.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 5.133.192.212 - - - 500 MISS - - [29/Jul/2026:23:58:40 +0000] "GET / HTTP/1.1" 3573 "http://redlighthealthbenefits.com/" "Mozilla/5.0 (Linux; Android 12; SAMSUNG SM-A415F) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/23.0 Chrome/115.0.0.0 Mobile Safari/537.3" "5.133.192.212, 5.133.192.212, 5.133.192.212, 5.133.192.212"
修改文件时间
将文件时间修改为当前时间的前一年
删除文件