文件操作 - redlightinflamation.log
返回文件管理
返回主菜单
删除本文件
文件: /storage/v12552/redlightinflamation/logs/redlightinflamation.log
编辑文件内容
37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:00:04:44 +0000] "POST /wp-cron.php?doing_wp_cron=1785369884.3244619369506835937500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 217.182.128.41 - - - 200 BYPASS - - [30/Jul/2026:00:04:44 +0000] "GET /wp-login.php HTTP/1.1" 2820 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "217.182.128.41, 217.182.128.41, 217.182.128.41, 217.182.128.41" 217.182.128.41 - _uid=0100007F1C956A6A869867AE023E0403 - 200 BYPASS - - [30/Jul/2026:00:04:46 +0000] "POST /wp-login.php HTTP/1.1" 2855 "https://redlightinflammation.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "217.182.128.41, 217.182.128.41, 217.182.128.41, 217.182.128.41" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:00:26:25 +0000] "POST /wp-cron.php?doing_wp_cron=1785371184.5149319171905517578125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 216.73.216.170 - _uid=0100007F5D71696A8BF0B71F02CC0E03 - 200 MISS - - [30/Jul/2026:00:26:25 +0000] "GET /sitemap_index.xml HTTP/1.1" 1169 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "216.73.216.170, 216.73.216.170, 216.73.216.170, 216.73.216.170" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:07 +0000] "GET /--wp-lgj.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:00:29:09 +0000] "POST /wp-cron.php?doing_wp_cron=1785371348.8913769721984863281250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 135.119.63.61 - - - 500 MISS - - [30/Jul/2026:00:29:09 +0000] "GET /.well-known/.well-known/ HTTP/1.1" 3383 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:09 +0000] "GET /.well-known/autoload_classmap.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:10 +0000] "GET /.well-known/flower.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:10 +0000] "GET /.well-known/xleet.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:10 +0000] "GET /.well-known/acme-challenge/flower.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:10 +0000] "GET /.well-known/acme-challenge/xleet.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:11 +0000] "GET /.well-known/pki-validation/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:11 +0000] "GET /.well-known/pki-validation/autoload_classmap.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 500 MISS - - [30/Jul/2026:00:29:12 +0000] "GET /.well-known/pki-validation/configKZU/Jump/0-woodhous/Ven-C/Ven-US/0-upstartd/ HTTP/1.1" 3383 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:12 +0000] "GET /.well-known/pki-validation/flower.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:13 +0000] "GET /.well-known/pki-validation/xleet.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:13 +0000] "GET /.wp-cli/autoload_classmap.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:13 +0000] "GET /.wp-cli/flower.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:13 +0000] "GET /.wp-cli/xleet.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:00:29:14 +0000] "GET //wp-admin/network/autoload_classmap.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:00:29:14 +0000] "GET //wp-admin/network/flower.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [30/Jul/2026:00:29:14 +0000] "GET //wp-admin/network/xleet.php/wp-content/flower.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 HIT - - [30/Jul/2026:00:29:14 +0000] "GET /1.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:15 +0000] "GET /admin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:15 +0000] "GET /as.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:15 +0000] "GET /autoload_classmap.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:15 +0000] "GET /back.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:16 +0000] "GET /c/autoload_classmap.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:16 +0000] "GET /c/flower.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:16 +0000] "GET /c/xleet.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:16 +0000] "GET /classwithtostring.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:17 +0000] "GET /content.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:17 +0000] "GET /doc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:17 +0000] "GET /dropdown.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:17 +0000] "GET /ee.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:18 +0000] "GET /flower.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:18 +0000] "GET /gecko-new.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:18 +0000] "GET /m.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:18 +0000] "GET /mah/autoload_classmap.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:19 +0000] "GET /mah/flower.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:19 +0000] "GET /mah/xleet.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:19 +0000] "GET /mini.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:19 +0000] "GET /moon.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:20 +0000] "GET /new.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:20 +0000] "GET /radio.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:20 +0000] "GET /s.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:20 +0000] "GET /sim.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:21 +0000] "GET /text.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:21 +0000] "GET /user.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 MISS - - [30/Jul/2026:00:29:21 +0000] "GET /webadmin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [30/Jul/2026:00:29:21 +0000] "GET /wordpress/wp-content/plugins/xcvbx/autoload_classmap.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [30/Jul/2026:00:29:22 +0000] "GET /wordpress/wp-content/plugins/xcvbx/flower.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [30/Jul/2026:00:29:22 +0000] "GET /wordpress/wp-content/plugins/xcvbx/xleet.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [30/Jul/2026:00:29:22 +0000] "GET /wordpress/wp-content/themes/as/autoload_classmap.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [30/Jul/2026:00:29:22 +0000] "GET /wordpress/wp-content/themes/as/flower.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [30/Jul/2026:00:29:23 +0000] "GET /wordpress/wp-content/themes/as/xleet.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:00:29:23 +0000] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:00:29:23 +0000] "GET /wp-admin/css/colors/autoload_classmap.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:00:29:24 +0000] "GET /wp-admin/css/colors/flower.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:00:29:24 +0000] "GET /wp-admin/css/colors/xleet.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:00:29:24 +0000] "GET /wp-admin/flower.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:00:29:24 +0000] "GET /wp-admin/maint/autoload_classmap.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:00:29:25 +0000] "GET /wp-admin/maint/flower.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:00:29:25 +0000] "GET /wp-admin/maint/xleet.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:00:29:25 +0000] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:00:29:25 +0000] "GET /wp-admin/network/flower.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:00:29:26 +0000] "GET /wp-admin/network/xleet.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:00:29:26 +0000] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:00:29:26 +0000] "GET /wp-admin/user/flower.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:00:29:27 +0000] "GET /wp-admin/user/xleet.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:00:29:27 +0000] "GET /wp-admin/xleet.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 500 MISS - - [30/Jul/2026:00:29:27 +0000] "GET /wp-config-sample.php HTTP/1.1" 2852 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 135.119.63.61, 135.119.63.61, 135.119.63.61" 158.106.137.107 - - - 200 BYPASS - - [30/Jul/2026:00:29:49 +0000] "GET /wp-login.php HTTP/1.1" 2820 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "158.106.137.107, 158.106.137.107, 158.106.137.107, 158.106.137.107" 158.106.137.107 - _uid=0100007FFD9A6A6A869867AE02D70A03 - 200 BYPASS - - [30/Jul/2026:00:29:54 +0000] "POST /wp-login.php HTTP/1.1" 2855 "https://redlightinflammation.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "158.106.137.107, 158.106.137.107, 158.106.137.107, 158.106.137.107" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:00:50:25 +0000] "POST /wp-cron.php?doing_wp_cron=1785372625.1720569133758544921875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 199.45.154.127 - - - 200 BYPASS - - [30/Jul/2026:00:50:25 +0000] "GET /wp-json/?_fields=name,description,home,gmt_offset,timezone_string,namespaces HTTP/1.1" 1002 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" "199.45.154.127, 199.45.154.127, 199.45.154.127, 199.45.154.127" 194.5.48.191 - - - 403 BYPASS - - [30/Jul/2026:00:54:03 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.191, 194.5.48.191, 194.5.48.191, 194.5.48.191" 194.5.48.181 - - - 403 BYPASS - - [30/Jul/2026:00:54:03 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.181, 194.5.48.181, 194.5.48.181, 194.5.48.181" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:00:56:37 +0000] "POST /wp-cron.php?doing_wp_cron=1785372997.0102910995483398437500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 213.171.211.213 - - - 200 BYPASS - - [30/Jul/2026:00:56:37 +0000] "GET /wp-login.php HTTP/1.1" 2820 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "213.171.211.213, 213.171.211.213, 213.171.211.213, 213.171.211.213" 77.172.115.185 - - - 200 HIT - - [30/Jul/2026:01:01:40 +0000] "GET /sitemap_index.xml HTTP/1.1" 1237 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.176 Safari/537.36" "77.172.115.185, 77.172.115.185, 77.172.115.185, 77.172.115.185" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:01:01:44 +0000] "POST /wp-cron.php?doing_wp_cron=1785373303.7115581035614013671875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 94.33.0.90 - - - 200 MISS - - [30/Jul/2026:01:01:44 +0000] "GET /page-sitemap.xml HTTP/1.1" 4377 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.6723.116 Safari/537.36" "94.33.0.90, 94.33.0.90, 94.33.0.90, 94.33.0.90" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:08:56 +0000] "GET /wp-includes/interactivity-api/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:08:57 +0000] "GET /php8.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:01:08:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785373737.8866429328918457031250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:01:08:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785373738.5573139190673828125000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:01:08:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785373739.4401650428771972656250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 74.248.33.8 - - - 500 MISS - - [30/Jul/2026:01:09:00 +0000] "GET /assets/ HTTP/1.1" 3383 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:00 +0000] "GET /lite.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [30/Jul/2026:01:09:00 +0000] "GET /term.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:00 +0000] "GET /config.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 BYPASS - - [30/Jul/2026:01:09:01 +0000] "GET /wp-admin/classwithtostring.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:01 +0000] "GET /wp-good.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [30/Jul/2026:01:09:01 +0000] "GET /wp-includes/Requests/library/index.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [30/Jul/2026:01:09:02 +0000] "GET /abcd.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:02 +0000] "GET /x.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [30/Jul/2026:01:09:02 +0000] "GET /goods.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:03 +0000] "GET /wp-access.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [30/Jul/2026:01:09:03 +0000] "GET /wp-content/uploads/min.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:03 +0000] "GET /filemanager.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:04 +0000] "GET /wp-includes/ID3/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:04 +0000] "GET /bthil.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [30/Jul/2026:01:09:04 +0000] "GET /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [30/Jul/2026:01:09:05 +0000] "GET /wp-admin/includes/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:05 +0000] "GET /cv.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [30/Jul/2026:01:09:05 +0000] "GET /wp-content/packed.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:06 +0000] "GET /css.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 BYPASS - - [30/Jul/2026:01:09:06 +0000] "GET /wp-admin/js/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:06 +0000] "GET /core.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:06 +0000] "GET /admin/function.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:07 +0000] "GET /admin/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:07 +0000] "GET /storage/rip.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:07 +0000] "GET /ahax.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:07 +0000] "GET /zoom1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:08 +0000] "GET /txets.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:01:09:09 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=cc45ff7698 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 74.248.33.8 - - - 302 BYPASS - - [30/Jul/2026:01:09:09 +0000] "GET /wp-admin/network/ HTTP/1.1" 605 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [30/Jul/2026:01:09:09 +0000] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [30/Jul/2026:01:09:10 +0000] "GET /wp-content/themes/about.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:10 +0000] "GET /wp-includes/assets/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 302 BYPASS - - [30/Jul/2026:01:09:11 +0000] "GET /wp-admin/index.php HTTP/1.1" 604 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [30/Jul/2026:01:09:12 +0000] "GET /radio.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:12 +0000] "GET /item.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:12 +0000] "GET /t.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:12 +0000] "GET /i.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [30/Jul/2026:01:09:13 +0000] "GET /deepseek_d.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [30/Jul/2026:01:09:13 +0000] "GET /wp-includes/fonts/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:13 +0000] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [30/Jul/2026:01:09:13 +0000] "GET /wp-admin/css/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [30/Jul/2026:01:09:14 +0000] "GET /wp-content/themes/pridmag/il.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:14 +0000] "GET /assets/images/doc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [30/Jul/2026:01:09:14 +0000] "GET /bgymj.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:15 +0000] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 500 MISS - - [30/Jul/2026:01:09:16 +0000] "GET /images/ HTTP/1.1" 3383 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 200 HIT - - [30/Jul/2026:01:09:16 +0000] "GET /wp-load.php HTTP/1.1" 295 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [30/Jul/2026:01:09:17 +0000] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [30/Jul/2026:01:09:17 +0000] "GET /a.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:17 +0000] "GET /u.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:17 +0000] "GET /r.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:18 +0000] "GET /wp-blog.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [30/Jul/2026:01:09:18 +0000] "GET /xxx.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 500 MISS - - [30/Jul/2026:01:09:19 +0000] "GET /randkeyword.PhP7 HTTP/1.1" 3383 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 500 MISS - - [30/Jul/2026:01:09:20 +0000] "GET /vendor/ HTTP/1.1" 3383 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:21 +0000] "GET /tool.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:21 +0000] "GET /wp-content.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [30/Jul/2026:01:09:21 +0000] "GET /k.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:21 +0000] "GET /root.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:22 +0000] "GET /ws.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [30/Jul/2026:01:09:22 +0000] "GET /p.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:22 +0000] "GET /elp.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:22 +0000] "GET /a1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:23 +0000] "GET /wp-includes/Text/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 500 MISS - - [30/Jul/2026:01:09:24 +0000] "GET /alfa-rex.php7 HTTP/1.1" 3383 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 BYPASS - - [30/Jul/2026:01:09:24 +0000] "GET /wp-admin/css/admin.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:25 +0000] "GET /install.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [30/Jul/2026:01:09:25 +0000] "GET /wp-includes/fonts/index.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:25 +0000] "GET /upload.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [30/Jul/2026:01:09:25 +0000] "GET /wp-includes/ID3/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [30/Jul/2026:01:09:26 +0000] "GET /wp-includes/Text/Diff/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [30/Jul/2026:01:09:26 +0000] "GET /wp-content/file.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:26 +0000] "GET /files.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:27 +0000] "GET /o.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:27 +0000] "GET /file2.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:27 +0000] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:27 +0000] "GET /xda.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:28 +0000] "GET /theme.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:28 +0000] "GET //classwithtostring.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:28 +0000] "GET /news.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:28 +0000] "GET /about/function.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 302 BYPASS - - [30/Jul/2026:01:09:29 +0000] "GET /wp-admin/user/ HTTP/1.1" 602 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [30/Jul/2026:01:09:30 +0000] "GET /wp-includes/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [30/Jul/2026:01:09:30 +0000] "GET /wp-includes/images/media/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:31 +0000] "GET /lock360.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:31 +0000] "GET /wp-conflg.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:31 +0000] "GET /123.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:32 +0000] "GET /yanz.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [30/Jul/2026:01:09:32 +0000] "GET /autoload_classmap.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:32 +0000] "GET /bi.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:33 +0000] "GET /cc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:33 +0000] "GET /files/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 500 MISS - - [30/Jul/2026:01:09:34 +0000] "GET /1.php7 HTTP/1.1" 3383 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:34 +0000] "GET /disagraeosc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:35 +0000] "GET /wp-logs.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 BYPASS - - [30/Jul/2026:01:09:35 +0000] "GET /wp-admin/css/about.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:35 +0000] "GET /system_log.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:35 +0000] "GET /24.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [30/Jul/2026:01:09:36 +0000] "GET /wp-admin/maint/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [30/Jul/2026:01:09:36 +0000] "GET /wp-content/plugins/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 500 MISS - - [30/Jul/2026:01:09:37 +0000] "GET /admin/controller/extension/extension/ HTTP/1.1" 3383 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [30/Jul/2026:01:09:38 +0000] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 BYPASS - - [30/Jul/2026:01:09:38 +0000] "GET /wp-admin/images/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:39 +0000] "GET /num.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [30/Jul/2026:01:09:39 +0000] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 500 MISS - - [30/Jul/2026:01:09:40 +0000] "GET /wp-content/et-cache/ HTTP/1.1" 3383 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [30/Jul/2026:01:09:41 +0000] "GET /wp-content/upgrade/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:41 +0000] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:41 +0000] "GET /gifclass.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [30/Jul/2026:01:09:41 +0000] "GET /wp-includes/certificates/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [30/Jul/2026:01:09:42 +0000] "GET /wp-content/plugins/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:42 +0000] "GET /css/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 200 MISS - - [30/Jul/2026:01:09:42 +0000] "GET /wp-cron.php HTTP/1.1" 476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:43 +0000] "GET /wp-block.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:01:09:43 +0000] "GET /wp-includes/fonts/admin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [30/Jul/2026:01:09:44 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:01:11:12 +0000] "POST /wp-cron.php?doing_wp_cron=1785373872.1863648891448974609375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 192.165.123.45 - - - 500 MISS - - [30/Jul/2026:01:11:12 +0000] "GET / HTTP/1.1" 3562 "https://www.redlightinflammation.com/" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.3" "192.165.123.45, 192.165.123.45, 192.165.123.45, 192.165.123.45" 20.9.4.9 - - - 403 BYPASS - - [30/Jul/2026:01:11:17 +0000] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "20.9.4.9, 20.9.4.9, 20.9.4.9, 20.9.4.9" 43.228.157.250 - - - 403 BYPASS - - [30/Jul/2026:01:25:14 +0000] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "43.228.157.250, 43.228.157.250, 43.228.157.250, 43.228.157.250" 43.228.157.250 - - - 404 BYPASS - - [30/Jul/2026:01:25:14 +0000] "POST /wp-plain.php HTTP/1.1" 376 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.250, 43.228.157.250, 43.228.157.250, 43.228.157.250" 43.228.157.250 - - - 404 MISS - - [30/Jul/2026:01:25:15 +0000] "GET /ebhxprld.php?Fox=d3wL7 HTTP/1.1" 492 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.250, 43.228.157.250, 43.228.157.250, 43.228.157.250" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:01:25:16 +0000] "POST /wp-cron.php?doing_wp_cron=1785374716.1110610961914062500000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:01:25:16 +0000] "POST /wp-cron.php?doing_wp_cron=1785374716.0743219852447509765625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 43.228.157.250 - - - 500 MISS - - [30/Jul/2026:01:25:16 +0000] "GET / HTTP/1.1" 3562 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.250, 43.228.157.250, 43.228.157.250, 43.228.157.250" 43.228.157.250 - - - 500 BYPASS - - [30/Jul/2026:01:25:16 +0000] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 3385 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.250, 43.228.157.250, 43.228.157.250, 43.228.157.250" 43.228.157.250 - - - 403 BYPASS - - [30/Jul/2026:01:25:17 +0000] "GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/1.1" 467 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.250, 43.228.157.250, 43.228.157.250, 43.228.157.250" 43.228.157.250 - - - 404 MISS - - [30/Jul/2026:01:25:17 +0000] "GET /plugins/content/apismtp/apismtp.php?test=hello HTTP/1.1" 492 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.250, 43.228.157.250, 43.228.157.250, 43.228.157.250" 43.228.157.250 - - - 500 MISS - - [30/Jul/2026:01:25:18 +0000] "GET /wp-content/plugins/apikey/apikey.php.suspected?test=hello HTTP/1.1" 3383 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.250, 43.228.157.250, 43.228.157.250, 43.228.157.250" 43.228.157.250 - - - 500 BYPASS - - [30/Jul/2026:01:25:18 +0000] "POST /alfacgiapi/perl.alfa HTTP/1.1" 3385 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.250, 43.228.157.250, 43.228.157.250, 43.228.157.250" 43.228.157.250 - - - 403 BYPASS - - [30/Jul/2026:01:25:19 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.250, 43.228.157.250, 43.228.157.250, 43.228.157.250" 43.228.157.250 - - - 500 MISS - - [30/Jul/2026:01:25:19 +0000] "GET /plugins/content/apismtp/apismtp.php.suspected?test=hello HTTP/1.1" 3383 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.250, 43.228.157.250, 43.228.157.250, 43.228.157.250" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:01:46:36 +0000] "POST /wp-cron.php?doing_wp_cron=1785375996.2444419860839843750000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 103.57.220.209 - - - 200 BYPASS - - [30/Jul/2026:01:46:36 +0000] "GET /wp-login.php HTTP/1.1" 2820 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.57.220.209, 103.57.220.209, 103.57.220.209, 103.57.220.209" 103.57.220.209 - _uid=0100007FFCAC6A6A869867AE028F2003 - 200 BYPASS - - [30/Jul/2026:01:46:40 +0000] "POST /wp-login.php HTTP/1.1" 2855 "https://redlightinflammation.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.57.220.209, 103.57.220.209, 103.57.220.209, 103.57.220.209" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:01:51:17 +0000] "POST /wp-cron.php?doing_wp_cron=1785376277.3492460250854492187500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 79.144.173.86 - - - 200 MISS - - [30/Jul/2026:01:51:18 +0000] "GET /local-sitemap.xml HTTP/1.1" 837 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_2_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.60 Safari/537.36" "79.144.173.86, 79.144.173.86, 79.144.173.86, 79.144.173.86" 188.245.84.194 - - - 403 BYPASS - - [30/Jul/2026:01:55:11 +0000] "GET /wp-content/wplog.php?root=admin888 HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "188.245.84.194, 188.245.84.194, 188.245.84.194, 188.245.84.194" 43.228.157.245 - - - 403 BYPASS - - [30/Jul/2026:01:57:08 +0000] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "43.228.157.245, 43.228.157.245, 43.228.157.245, 43.228.157.245" 43.228.157.245 - - - 403 BYPASS - - [30/Jul/2026:01:57:08 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.245, 43.228.157.245, 43.228.157.245, 43.228.157.245" 43.228.157.245 - - - 404 BYPASS - - [30/Jul/2026:01:57:08 +0000] "POST /wp-plain.php HTTP/1.1" 376 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.245, 43.228.157.245, 43.228.157.245, 43.228.157.245" 43.228.157.245 - - - 404 MISS - - [30/Jul/2026:01:57:08 +0000] "GET /vwrzwhyi.php?Fox=d3wL7 HTTP/1.1" 492 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.245, 43.228.157.245, 43.228.157.245, 43.228.157.245" 43.228.157.245 - - - 403 BYPASS - - [30/Jul/2026:01:57:08 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.245, 43.228.157.245, 43.228.157.245, 43.228.157.245" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:01:57:10 +0000] "POST /wp-cron.php?doing_wp_cron=1785376629.5960860252380371093750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 43.228.157.245 - - - 500 BYPASS - - [30/Jul/2026:01:57:10 +0000] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 3385 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.245, 43.228.157.245, 43.228.157.245, 43.228.157.245" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:01:57:10 +0000] "POST /wp-cron.php?doing_wp_cron=1785376630.4068410396575927734375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 43.228.157.245 - - - 500 MISS - - [30/Jul/2026:01:57:11 +0000] "GET / HTTP/1.1" 3562 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.245, 43.228.157.245, 43.228.157.245, 43.228.157.245" 43.228.157.245 - - - 403 BYPASS - - [30/Jul/2026:01:57:11 +0000] "GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/1.1" 467 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.245, 43.228.157.245, 43.228.157.245, 43.228.157.245" 43.228.157.245 - - - 404 HIT - - [30/Jul/2026:01:57:11 +0000] "GET /plugins/content/apismtp/apismtp.php?test=hello HTTP/1.1" 491 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.245, 43.228.157.245, 43.228.157.245, 43.228.157.245" 43.228.157.245 - - - 500 BYPASS - - [30/Jul/2026:01:57:12 +0000] "POST /alfacgiapi/perl.alfa HTTP/1.1" 3385 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.245, 43.228.157.245, 43.228.157.245, 43.228.157.245" 43.228.157.245 - - - 500 MISS - - [30/Jul/2026:01:57:13 +0000] "GET /wp-content/plugins/apikey/apikey.php.suspected?test=hello HTTP/1.1" 3383 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.245, 43.228.157.245, 43.228.157.245, 43.228.157.245" 43.228.157.245 - - - 500 MISS - - [30/Jul/2026:01:57:15 +0000] "GET /plugins/content/apismtp/apismtp.php.suspected?test=hello HTTP/1.1" 3383 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.245, 43.228.157.245, 43.228.157.245, 43.228.157.245" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:02:07:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785377278.6010639667510986328125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 152.53.111.131 - - - 200 BYPASS - - [30/Jul/2026:02:07:59 +0000] "GET /wp-login.php HTTP/1.1" 2820 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "152.53.111.131, 152.53.111.131, 152.53.111.131, 152.53.111.131" 152.53.111.131 - _uid=0100007FFFB16A6A869867AE029B2603 - 200 BYPASS - - [30/Jul/2026:02:08:00 +0000] "POST /wp-login.php HTTP/1.1" 2855 "https://redlightinflammation.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "152.53.111.131, 152.53.111.131, 152.53.111.131, 152.53.111.131" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:11:09 +0000] "GET /admin.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:09 +0000] "GET /edit.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:09 +0000] "GET /w.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:09 +0000] "GET /file.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:10 +0000] "GET /adminfuns.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:10 +0000] "GET /aa.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:11:10 +0000] "GET /classwithtostring.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:11:10 +0000] "GET /about.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:11 +0000] "GET /goods.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:11:11 +0000] "GET /php8.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:11 +0000] "GET /info.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:11 +0000] "GET /chosen.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:11:12 +0000] "GET /simple.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:12 +0000] "GET /ioxi-o.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:12 +0000] "GET /av.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 301 BYPASS - - [30/Jul/2026:02:11:12 +0000] "GET /wp-admin HTTP/1.1" 494 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:13 +0000] "GET /wp.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:11:13 +0000] "GET /file2.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:13 +0000] "GET /images/class-config.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:13 +0000] "GET /alfa.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:11:14 +0000] "GET /1.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:11:14 +0000] "GET /222.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:14 +0000] "GET /asasx.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:11:14 +0000] "GET /filemanager.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:15 +0000] "GET /themes.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 403 BYPASS - - [30/Jul/2026:02:11:15 +0000] "GET /wp-content/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:15 +0000] "GET /buy.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:11:15 +0000] "GET /dropdown.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:16 +0000] "GET /inputs.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:16 +0000] "GET /100.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:16 +0000] "GET /akc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:16 +0000] "GET /autoload_classmap/function.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:17 +0000] "GET /php.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:11:17 +0000] "GET /t.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:17 +0000] "GET /index/function.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:17 +0000] "GET /wk/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:17 +0000] "GET /wp-blink.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:18 +0000] "GET /xfun.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:18 +0000] "GET /p.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 403 BYPASS - - [30/Jul/2026:02:11:18 +0000] "GET /wp-content/themes/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:18 +0000] "GET /aaa.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:19 +0000] "GET /term.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:19 +0000] "GET /7.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:19 +0000] "GET /file5.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:19 +0000] "GET /makeasmtp.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 403 BYPASS - - [30/Jul/2026:02:11:20 +0000] "GET /wp-content/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:20 +0000] "GET /atomlib.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:20 +0000] "GET /min.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:11:20 +0000] "GET /mac.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:02:11:21 +0000] "GET /nc4.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 216.73.216.170 - _uid=0100007F5D71696A8BF0B71F02CC0E03 - 200 HIT - - [30/Jul/2026:02:18:47 +0000] "GET /sitemap_index.xml HTTP/1.1" 1149 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "216.73.216.170, 216.73.216.170, 216.73.216.170, 216.73.216.170" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:02:19:54 +0000] "POST /wp-cron.php?doing_wp_cron=1785377994.2314739227294921875000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:02:19:55 +0000] "POST /wp-cron.php?doing_wp_cron=1785377994.9770820140838623046875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:02:19:56 +0000] "POST /wp-cron.php?doing_wp_cron=1785377995.9336669445037841796875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 192.71.142.176 - - - 500 MISS - - [30/Jul/2026:02:19:56 +0000] "GET / HTTP/1.1" 3562 "http://redlightinflammation.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.3" "192.71.142.176, 192.71.142.176, 192.71.142.176, 192.71.142.176" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:02:24:05 +0000] "POST /wp-cron.php?doing_wp_cron=1785378245.4292669296264648437500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 43.160.219.206 - - - 500 MISS - - [30/Jul/2026:02:24:06 +0000] "GET / HTTP/1.1" 3562 "http://redlightinflammation.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "43.160.219.206, 43.160.219.206, 43.160.219.206, 43.160.219.206" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:39 +0000] "GET /admin.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:39 +0000] "GET /edit.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:39 +0000] "GET /w.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:39 +0000] "GET /file.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:40 +0000] "GET /adminfuns.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:40 +0000] "GET /aa.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:40 +0000] "GET /classwithtostring.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:40 +0000] "GET /about.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:41 +0000] "GET /goods.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:41 +0000] "GET /php8.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:41 +0000] "GET /info.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:41 +0000] "GET /chosen.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:42 +0000] "GET /simple.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:42 +0000] "GET /ioxi-o.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:42 +0000] "GET /av.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 301 BYPASS - - [30/Jul/2026:02:44:42 +0000] "GET /wp-admin HTTP/1.1" 494 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:43 +0000] "GET /wp.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:43 +0000] "GET /file2.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:43 +0000] "GET /images/class-config.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:43 +0000] "GET /alfa.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:44 +0000] "GET /1.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:44 +0000] "GET /222.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:44 +0000] "GET /asasx.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:44 +0000] "GET /filemanager.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:45 +0000] "GET /themes.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 403 BYPASS - - [30/Jul/2026:02:44:45 +0000] "GET /wp-content/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:45 +0000] "GET /buy.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:45 +0000] "GET /dropdown.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:46 +0000] "GET /inputs.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:46 +0000] "GET /100.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:46 +0000] "GET /akc.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:46 +0000] "GET /autoload_classmap/function.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:47 +0000] "GET /php.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:47 +0000] "GET /t.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:47 +0000] "GET /index/function.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:47 +0000] "GET /wk/index.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:48 +0000] "GET /wp-blink.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:48 +0000] "GET /xfun.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:48 +0000] "GET /p.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 403 BYPASS - - [30/Jul/2026:02:44:48 +0000] "GET /wp-content/themes/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:49 +0000] "GET /aaa.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:49 +0000] "GET /term.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:49 +0000] "GET /7.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:49 +0000] "GET /file5.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:50 +0000] "GET /makeasmtp.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 403 BYPASS - - [30/Jul/2026:02:44:50 +0000] "GET /wp-content/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:50 +0000] "GET /atomlib.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:50 +0000] "GET /min.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:51 +0000] "GET /mac.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:02:44:51 +0000] "GET /nc4.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:02:52:09 +0000] "POST /wp-cron.php?doing_wp_cron=1785379929.2684020996093750000000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 185.115.217.185 - - - 200 BYPASS - - [30/Jul/2026:02:52:09 +0000] "GET /wp-login.php HTTP/1.1" 2820 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "185.115.217.185, 185.115.217.185, 185.115.217.185, 185.115.217.185" 185.115.217.185 - _uid=0100007F59BC6A6A869867AE026B2C03 - 200 BYPASS - - [30/Jul/2026:02:52:15 +0000] "POST /wp-login.php HTTP/1.1" 2855 "https://redlightinflammation.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "185.115.217.185, 185.115.217.185, 185.115.217.185, 185.115.217.185" 103.60.15.166 - _uid=0100007FE7496A6A2CC0CF8102F71103 - 200 BYPASS - - [30/Jul/2026:02:55:31 +0000] "GET /wp-content/uploads/2024/01/Harnessing-the-Radiance_-Red-Lights-Role-in-Soothing-Chronic-Inflammation-2-150x150.jpg?nonwebp=1&edge=redlightinflammation.com HTTP/1.1" 7012 "-" "BunnyOptimizer-v01" "103.60.15.166, 103.60.15.166, 103.60.15.166" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:03:10:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785381059.2430899143218994140625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 80.248.225.154 - - - 500 MISS - - [30/Jul/2026:03:10:59 +0000] "GET / HTTP/1.1" 3562 "http://redlightinflammation.com/" "Mozilla/5.0 (Linux; Android 14; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.280 Mobile Safari/537.36 OPR/80.4.4244.7786" "80.248.225.154, 80.248.225.154, 80.248.225.154, 80.248.225.154" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:03:20:57 +0000] "POST /wp-cron.php?doing_wp_cron=1785381657.3622200489044189453125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:03:20:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785381658.0180330276489257812500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:03:20:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785381658.9331851005554199218750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 43.161.224.78 - - - 500 MISS - - [30/Jul/2026:03:20:59 +0000] "GET / HTTP/1.1" 3562 "https://www.redlightinflammation.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "43.161.224.78, 43.161.224.78, 43.161.224.78, 43.161.224.78" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:03:41:25 +0000] "POST /wp-cron.php?doing_wp_cron=1785382884.9194090366363525390625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 217.182.128.41 - - - 200 BYPASS - - [30/Jul/2026:03:41:25 +0000] "GET /wp-login.php HTTP/1.1" 2820 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "217.182.128.41, 217.182.128.41, 217.182.128.41, 217.182.128.41" 217.182.128.41 - _uid=0100007FE5C76A6A869867AE022C3303 - 200 BYPASS - - [30/Jul/2026:03:41:26 +0000] "POST /wp-login.php HTTP/1.1" 2855 "https://redlightinflammation.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "217.182.128.41, 217.182.128.41, 217.182.128.41, 217.182.128.41" 20.104.22.47 - - - 403 BYPASS - - [30/Jul/2026:03:51:54 +0000] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 385 "http://redlightinflammation.com/wp-content/plugins/fix/up.php" "Mozilla/5.0" "20.104.22.47, 20.104.22.47, 20.104.22.47, 20.104.22.47" 20.104.22.47 - - - 403 BYPASS - - [30/Jul/2026:03:51:54 +0000] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 385 "-" "Mozilla/5.0" "20.104.22.47, 20.104.22.47, 20.104.22.47, 20.104.22.47" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:03:53:27 +0000] "POST /wp-cron.php?doing_wp_cron=1785383607.3179540634155273437500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 135.148.171.117 - - - 200 BYPASS - - [30/Jul/2026:03:53:27 +0000] "GET /wp-login.php HTTP/1.1" 2820 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 216.73.217.24 - - - 200 MISS - - [30/Jul/2026:04:10:58 +0000] "GET /robots.txt HTTP/1.1" 562 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "216.73.217.24, 216.73.217.24, 216.73.217.24, 216.73.217.24" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:04:10:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785384657.3826038837432861328125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 216.73.217.24 - - - 200 HIT - - [30/Jul/2026:04:10:59 +0000] "GET /sitemap_index.xml HTTP/1.1" 1237 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "216.73.217.24, 216.73.217.24, 216.73.217.24, 216.73.217.24" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:04:36:04 +0000] "POST /wp-cron.php?doing_wp_cron=1785386164.3946509361267089843750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 209.145.49.99 - - - 200 BYPASS - - [30/Jul/2026:04:36:05 +0000] "GET /wp-login.php HTTP/1.1" 2820 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "209.145.49.99, 209.145.49.99, 209.145.49.99, 209.145.49.99" 209.145.49.99 - _uid=0100007FB5D46A6A869867AE024C3B03 - 200 BYPASS - - [30/Jul/2026:04:36:10 +0000] "POST /wp-login.php HTTP/1.1" 2855 "https://redlightinflammation.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "209.145.49.99, 209.145.49.99, 209.145.49.99, 209.145.49.99" 74.248.33.8 - - - 404 HIT - - [30/Jul/2026:04:42:31 +0000] "GET /chosen.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:31 +0000] "GET /xleet.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:31 +0000] "GET /ds.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:31 +0000] "GET /f5.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:32 +0000] "GET /god4m.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [30/Jul/2026:04:42:32 +0000] "GET /info.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:04:42:33 +0000] "POST /wp-cron.php?doing_wp_cron=1785386553.2326040267944335937500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:04:42:34 +0000] "POST /wp-cron.php?doing_wp_cron=1785386553.8827450275421142578125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:04:42:35 +0000] "POST /wp-cron.php?doing_wp_cron=1785386554.7846109867095947265625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 74.248.33.8 - - - 500 MISS - - [30/Jul/2026:04:42:35 +0000] "GET /uploads/ HTTP/1.1" 3383 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:35 +0000] "GET /.__info.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:36 +0000] "GET /0.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:36 +0000] "GET /07.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:36 +0000] "GET /dropdown.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [30/Jul/2026:04:42:36 +0000] "GET /makeasmtp.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:37 +0000] "GET /wp-sigunq.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:37 +0000] "GET /wso112233.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:37 +0000] "GET /alfanew.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:37 +0000] "GET /fw.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 200 BYPASS - - [30/Jul/2026:04:42:38 +0000] "GET /wp-login.php HTTP/1.1" 2820 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:39 +0000] "GET /simple.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:39 +0000] "GET /classsmtps.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:40 +0000] "GET /wp-blog-header.php HTTP/1.1" 470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:41 +0000] "GET /wp-trackback.php HTTP/1.1" 537 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 302 MISS - - [30/Jul/2026:04:42:42 +0000] "GET /wp-signup.php HTTP/1.1" 524 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 405 MISS - - [30/Jul/2026:04:42:42 +0000] "GET /wp-comments-post.php HTTP/1.1" 307 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 MISS - - [30/Jul/2026:04:42:43 +0000] "GET /wp-mail.php HTTP/1.1" 1511 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:04:42:44 +0000] "POST /wp-cron.php?doing_wp_cron=1785386564.1842560768127441406250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:04:42:45 +0000] "POST /wp-cron.php?doing_wp_cron=1785386564.8123099803924560546875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 74.248.33.8 - - - 302 MISS - - [30/Jul/2026:04:42:45 +0000] "GET /wp-activate.php HTTP/1.1" 524 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:45 +0000] "GET /post.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:46 +0000] "GET /wp-2019.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:46 +0000] "GET /hoot.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:46 +0000] "GET /log.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:46 +0000] "GET /bak.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:47 +0000] "GET /content.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:47 +0000] "GET /upfile.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:47 +0000] "GET /bypass.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:47 +0000] "GET /updates.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:48 +0000] "GET /xmrlpc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:48 +0000] "GET /ae.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:48 +0000] "GET /moon.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:48 +0000] "GET /blog.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:49 +0000] "GET /ini.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:49 +0000] "GET /admin-ajax.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [30/Jul/2026:04:42:49 +0000] "GET /akc.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:49 +0000] "GET /akcc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [30/Jul/2026:04:42:50 +0000] "GET /asasx.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:50 +0000] "GET /axx.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:50 +0000] "GET /berax.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:50 +0000] "GET /build.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [30/Jul/2026:04:42:51 +0000] "GET /buy.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:51 +0000] "GET /checkbox.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:51 +0000] "GET /cong.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:51 +0000] "GET /file4.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:52 +0000] "GET /flower.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:52 +0000] "GET /form.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:52 +0000] "GET /gecko.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:52 +0000] "GET /kyami.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:53 +0000] "GET /manager.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [30/Jul/2026:04:42:53 +0000] "GET /mari.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [30/Jul/2026:04:42:53 +0000] "GET /nc4.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 500 MISS - - [30/Jul/2026:04:42:54 +0000] "GET /cgi-bin/ HTTP/1.1" 3383 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:04:43:53 +0000] "POST /wp-cron.php?doing_wp_cron=1785386633.2342610359191894531250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 66.132.172.102 - - - 500 MISS - - [30/Jul/2026:04:43:53 +0000] "GET / HTTP/1.1" 3562 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" "66.132.172.102, 66.132.172.102, 66.132.172.102, 66.132.172.102" 51.103.154.47 - - - 403 BYPASS - - [30/Jul/2026:05:18:28 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 385 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - - - 404 MISS - - [30/Jul/2026:05:18:30 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 433 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FFA8F6A6A92F0672002425803 - 404 MISS - - [30/Jul/2026:05:18:32 +0000] "GET //aa.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FB1906A6A8BF0B71F022EED03 - 404 MISS - - [30/Jul/2026:05:18:33 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FB1906A6A8BF0B71F022EED03 - 404 MISS - - [30/Jul/2026:05:18:35 +0000] "GET /media.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FB1906A6A8BF0B71F022EED03 - 404 MISS - - [30/Jul/2026:05:18:37 +0000] "GET /images.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FB1906A6A8BF0B71F022EED03 - 404 HIT - - [30/Jul/2026:05:18:38 +0000] "GET /gecko.php HTTP/1.1" 403 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F4CD66A6A869867AE02823C03 - 404 MISS - - [30/Jul/2026:05:18:40 +0000] "GET /82.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F4CD66A6A869867AE02823C03 - 404 MISS - - [30/Jul/2026:05:18:42 +0000] "GET /xstelth.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F4CD66A6A869867AE02823C03 - 404 MISS - - [30/Jul/2026:05:18:45 +0000] "GET /xp.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F4CD66A6A869867AE02823C03 - 404 MISS - - [30/Jul/2026:05:18:46 +0000] "GET ///admin.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F4CD66A6A869867AE02823C03 - 404 MISS - - [30/Jul/2026:05:18:48 +0000] "GET /adminner.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F4CD66A6A869867AE02823C03 - 404 MISS - - [30/Jul/2026:05:18:50 +0000] "GET //a.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F96016A6A8BF0B71F027B9203 - 404 MISS - - [30/Jul/2026:05:18:51 +0000] "GET /k.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F41A46A6A889867AE02AB0603 - 404 HIT - - [30/Jul/2026:05:18:52 +0000] "GET /aaa.php HTTP/1.1" 403 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FA1BA6A6A869867AE02882B03 - 404 MISS - - [30/Jul/2026:05:18:54 +0000] "GET /222.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F9CBA6A6A869867AE02702B03 - 404 MISS - - [30/Jul/2026:05:18:55 +0000] "GET /test.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F9CBA6A6A869867AE02702B03 - 404 MISS - - [30/Jul/2026:05:18:57 +0000] "GET /11.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F9CBA6A6A869867AE02702B03 - 404 MISS - - [30/Jul/2026:05:18:58 +0000] "GET /mac.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FA3BA6A6A869867AE02952B03 - 403 BYPASS - - [30/Jul/2026:05:19:00 +0000] "GET /wp-content/uploads/ HTTP/1.1" 297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FA3BA6A6A869867AE02952B03 - 403 BYPASS - - [30/Jul/2026:05:19:02 +0000] "GET /wp-includes/Text/ HTTP/1.1" 297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FA3BA6A6A869867AE02952B03 - 404 MISS - - [30/Jul/2026:05:19:04 +0000] "GET /dr.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FA3BA6A6A869867AE02952B03 - 404 MISS - - [30/Jul/2026:05:19:08 +0000] "GET /ops.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FA3BA6A6A869867AE02952B03 - 403 BYPASS - - [30/Jul/2026:05:19:13 +0000] "GET //wp-includes/assets/ HTTP/1.1" 297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FA3BA6A6A869867AE02952B03 - 403 BYPASS - - [30/Jul/2026:05:19:17 +0000] "GET /wp-includes/blocks/details/ HTTP/1.1" 297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FA3BA6A6A869867AE02952B03 - 404 MISS - - [30/Jul/2026:05:19:20 +0000] "GET /.well-known/about.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FA3BA6A6A869867AE02952B03 - 404 MISS - - [30/Jul/2026:05:19:22 +0000] "GET /wp-includes/ID3/about.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FA3BA6A6A869867AE02952B03 - 403 BYPASS - - [30/Jul/2026:05:19:25 +0000] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FA3BA6A6A869867AE02952B03 - 404 BYPASS - - [30/Jul/2026:05:19:30 +0000] "GET /wp-admin/css/colour.php HTTP/1.1" 299 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FA3BA6A6A869867AE02952B03 - 404 MISS - - [30/Jul/2026:05:19:33 +0000] "GET /8.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FA3BA6A6A869867AE02952B03 - 403 BYPASS - - [30/Jul/2026:05:19:35 +0000] "GET /wp-content/admin.php HTTP/1.1" 297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FA3BA6A6A869867AE02952B03 - 404 MISS - - [30/Jul/2026:05:19:37 +0000] "GET //f6.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FA3BA6A6A869867AE02952B03 - 403 BYPASS - - [30/Jul/2026:05:19:41 +0000] "GET /wp-content/themes/index.php HTTP/1.1" 297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FA3BA6A6A869867AE02952B03 - 404 MISS - - [30/Jul/2026:05:19:44 +0000] "GET /wp-blog.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FA3BA6A6A869867AE02952B03 - 404 MISS - - [30/Jul/2026:05:19:45 +0000] "GET //cgi-bin/index.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FA3BA6A6A869867AE02952B03 - 403 BYPASS - - [30/Jul/2026:05:19:49 +0000] "GET //wp-includes/l10n/ HTTP/1.1" 297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FA3BA6A6A869867AE02952B03 - 403 BYPASS - - [30/Jul/2026:05:19:54 +0000] "GET /wp-content/uploads/ HTTP/1.1" 297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FA3BA6A6A869867AE02952B03 - 404 MISS - - [30/Jul/2026:05:19:57 +0000] "GET /f35.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:05:20:01 +0000] "POST /wp-cron.php?doing_wp_cron=1785388801.1015579700469970703125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 51.103.154.47 - _uid=0100007FA3BA6A6A869867AE02952B03 - 200 MISS - - [30/Jul/2026:05:20:01 +0000] "GET /wp-load.php HTTP/1.1" 295 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FA3BA6A6A869867AE02952B03 - 404 MISS - - [30/Jul/2026:05:20:03 +0000] "GET /xyn.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FA3BA6A6A869867AE02952B03 - 404 MISS - - [30/Jul/2026:05:20:05 +0000] "GET /ccc.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FA3BA6A6A869867AE02952B03 - 404 MISS - - [30/Jul/2026:05:20:06 +0000] "GET /FWAZ.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FA3BA6A6A869867AE02952B03 - 404 MISS - - [30/Jul/2026:05:20:09 +0000] "GET /file.php? HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FA3BA6A6A869867AE02952B03 - 404 MISS - - [30/Jul/2026:05:20:10 +0000] "GET /file.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F97BA6A6A889867AE026D0B03 - 404 MISS - - [30/Jul/2026:05:20:12 +0000] "GET /ss.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FCC016A6A8BF0B71F02939203 - 404 MISS - - [30/Jul/2026:05:20:14 +0000] "GET /biufile.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FCC016A6A8BF0B71F02939203 - 404 MISS - - [30/Jul/2026:05:20:16 +0000] "GET /coffexium.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FBC906A6A92F0672002605803 - 404 MISS - - [30/Jul/2026:05:20:18 +0000] "GET /als.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FCF016A6A8BF0B71F029A9203 - 404 HIT - - [30/Jul/2026:05:20:21 +0000] "GET /simple.php HTTP/1.1" 403 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F3FD66A6A869867AE02563C03 - 404 MISS - - [30/Jul/2026:05:20:22 +0000] "GET /fpwch.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F3FD66A6A869867AE02563C03 - 404 HIT - - [30/Jul/2026:05:20:23 +0000] "GET /info.php HTTP/1.1" 403 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F38D66A6A869867AE02453C03 - 404 MISS - - [30/Jul/2026:05:20:26 +0000] "GET /11.php?p= HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FD8016A6A8BF0B71F02A49203 - 404 MISS - - [30/Jul/2026:05:20:28 +0000] "GET /dex.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FD8016A6A8BF0B71F02A49203 - 403 BYPASS - - [30/Jul/2026:05:20:55 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FD8016A6A8BF0B71F02A49203 - 404 MISS - - [30/Jul/2026:05:21:01 +0000] "GET /config.json.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FD8016A6A8BF0B71F02A49203 - 404 MISS - - [30/Jul/2026:05:21:55 +0000] "GET //wp.php? HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FD8016A6A8BF0B71F02A49203 - 404 MISS - - [30/Jul/2026:05:21:58 +0000] "GET /002.php?p= HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FD8016A6A8BF0B71F02A49203 - 404 MISS - - [30/Jul/2026:05:22:00 +0000] "GET /fffm.php?p= HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FE7906A6A8BF0B71F0271ED03 - 404 MISS - - [30/Jul/2026:05:22:02 +0000] "GET //johen.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FE9016A6A92F06720022D4203 - 404 MISS - - [30/Jul/2026:05:22:04 +0000] "GET /nwflm.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007FE9016A6A92F06720022D4203 - 404 MISS - - [30/Jul/2026:05:22:07 +0000] "GET /111.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F64916A6A8BF0B71F0250EE03 - 403 BYPASS - - [30/Jul/2026:05:22:12 +0000] "GET //wp-includes/Requests/ HTTP/1.1" 297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F64916A6A8BF0B71F0250EE03 - 404 MISS - - [30/Jul/2026:05:22:16 +0000] "GET /ws.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F42A46A6A869867AE02E61403 - 404 MISS - - [30/Jul/2026:05:22:17 +0000] "GET ///coffee.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F42A46A6A869867AE02E61403 - 404 HIT - - [30/Jul/2026:05:22:21 +0000] "GET /goods.php HTTP/1.1" 403 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F99BA6A6A869867AE02672B03 - 404 MISS - - [30/Jul/2026:05:22:26 +0000] "GET /about.php? HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F99BA6A6A869867AE02672B03 - 404 MISS - - [30/Jul/2026:05:22:31 +0000] "GET /about.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F98BA6A6A869867AE02662B03 - 404 MISS - - [30/Jul/2026:05:22:35 +0000] "GET /admin.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F97BA6A6A869867AE025F2B03 - 404 MISS - - [30/Jul/2026:05:22:37 +0000] "GET //themes.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F97BA6A6A869867AE025F2B03 - 404 MISS - - [30/Jul/2026:05:22:40 +0000] "GET /wefile.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F97BA6A6A869867AE025F2B03 - 404 MISS - - [30/Jul/2026:05:22:43 +0000] "GET /inputs.php? HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F97BA6A6A869867AE025F2B03 - 404 HIT - - [30/Jul/2026:05:22:49 +0000] "GET /inputs.php HTTP/1.1" 403 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F9EBA6A6A869867AE02792B03 - 404 MISS - - [30/Jul/2026:05:22:51 +0000] "GET //adminfuns.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F9EBA6A6A869867AE02792B03 - 404 MISS - - [30/Jul/2026:05:22:54 +0000] "GET /ssixta.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F1A026A6A92F0672002314203 - 404 MISS - - [30/Jul/2026:05:22:56 +0000] "GET /hypo.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F1A026A6A92F0672002314203 - 404 MISS - - [30/Jul/2026:05:23:00 +0000] "GET /404.php?p= HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F1A026A6A92F0672002314203 - 404 MISS - - [30/Jul/2026:05:23:01 +0000] "GET /reviall.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F1A026A6A92F0672002314203 - 404 MISS - - [30/Jul/2026:05:23:04 +0000] "GET /xxx.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F3EA46A6A869867AE02E11403 - 404 MISS - - [30/Jul/2026:05:23:07 +0000] "GET /yj09.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - - - 404 MISS - - [30/Jul/2026:05:23:08 +0000] "GET /alfa.php HTTP/1.1" 433 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F9BBA6A6A869867AE026E2B03 - 404 MISS - - [30/Jul/2026:05:23:10 +0000] "GET /xa.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F2C026A6A8BF0B71F02C09203 - 404 MISS - - [30/Jul/2026:05:23:11 +0000] "GET //av.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F2E026A6A92F0672002334203 - 404 MISS - - [30/Jul/2026:05:23:13 +0000] "GET /bthil.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F30A46A6A889867AE02980603 - 404 MISS - - [30/Jul/2026:05:23:15 +0000] "GET /geforce.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F31026A6A8BF0B71F02C29203 - 404 MISS - - [30/Jul/2026:05:23:16 +0000] "GET /classwithtostring.php?p= HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F36026A6A92F0672002344203 - 404 MISS - - [30/Jul/2026:05:23:18 +0000] "GET /mlqeheok.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F36026A6A92F0672002344203 - 404 MISS - - [30/Jul/2026:05:23:20 +0000] "GET /sh3ll.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F36026A6A92F0672002344203 - 404 MISS - - [30/Jul/2026:05:23:25 +0000] "GET /pbck.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F36026A6A92F0672002344203 - 404 MISS - - [30/Jul/2026:05:23:27 +0000] "GET ///s_w.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F36026A6A92F0672002344203 - 404 MISS - - [30/Jul/2026:05:23:31 +0000] "GET ///s_p.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F36026A6A92F0672002344203 - 404 MISS - - [30/Jul/2026:05:23:34 +0000] "GET ///s_y.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F36026A6A92F0672002344203 - 404 MISS - - [30/Jul/2026:05:23:36 +0000] "GET ///2larp.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F36026A6A92F0672002344203 - 404 MISS - - [30/Jul/2026:05:23:40 +0000] "GET ///term.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F36026A6A92F0672002344203 - 404 MISS - - [30/Jul/2026:05:23:45 +0000] "GET /000.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F36026A6A92F0672002344203 - 404 MISS - - [30/Jul/2026:05:23:48 +0000] "GET ///Jcrop.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F36026A6A92F0672002344203 - 404 MISS - - [30/Jul/2026:05:23:51 +0000] "GET /234ff.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F36026A6A92F0672002344203 - 404 MISS - - [30/Jul/2026:05:23:54 +0000] "GET /Zoo.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F36026A6A92F0672002344203 - 404 MISS - - [30/Jul/2026:05:23:54 +0000] "GET ///133.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F36026A6A92F0672002344203 - 404 MISS - - [30/Jul/2026:05:23:55 +0000] "GET /alls.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F36026A6A92F0672002344203 - 404 MISS - - [30/Jul/2026:05:23:56 +0000] "GET /wp-ws68.php?p= HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - _uid=0100007F36026A6A92F0672002344203 - 404 MISS - - [30/Jul/2026:05:23:57 +0000] "GET /w3lls.php HTTP/1.1" 345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - - - 404 MISS - - [30/Jul/2026:05:23:58 +0000] "GET /mgrr.php HTTP/1.1" 433 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 51.103.154.47 - - - 404 MISS - - [30/Jul/2026:05:23:59 +0000] "GET /pucci.php HTTP/1.1" 433 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47" 85.208.96.207 - - - 200 BYPASS - - [30/Jul/2026:05:40:04 +0000] "GET /category/red-light-therapy-for-inflammation/ HTTP/1.1" 241 "-" "Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)" "85.208.96.207, 85.208.96.207, 85.208.96.207, 85.208.96.207" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:05:43:12 +0000] "POST /wp-cron.php?doing_wp_cron=1785390192.0153849124908447265625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 167.71.218.184 - - - 200 BYPASS - - [30/Jul/2026:05:43:12 +0000] "GET /wp-login.php HTTP/1.1" 2820 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.71.218.184, 167.71.218.184, 167.71.218.184, 167.71.218.184" 167.71.218.184 - _uid=0100007F70E46A6A869867AE020E4803 - 200 BYPASS - - [30/Jul/2026:05:43:17 +0000] "POST /wp-login.php HTTP/1.1" 2855 "https://redlightinflammation.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.71.218.184, 167.71.218.184, 167.71.218.184, 167.71.218.184" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:06:00:50 +0000] "POST /wp-cron.php?doing_wp_cron=1785391249.6213629245758056640625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 192.241.143.148 - - - 200 BYPASS - - [30/Jul/2026:06:00:50 +0000] "GET /wp-login.php HTTP/1.1" 2820 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.241.143.148, 192.241.143.148, 192.241.143.148, 192.241.143.148" 192.241.143.148 - _uid=0100007F92E86A6A869867AE024D4B03 - 200 BYPASS - - [30/Jul/2026:06:00:51 +0000] "POST /wp-login.php HTTP/1.1" 2855 "https://redlightinflammation.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.241.143.148, 192.241.143.148, 192.241.143.148, 192.241.143.148" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:06:17:11 +0000] "POST /wp-cron.php?doing_wp_cron=1785392230.9556539058685302734375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 216.73.217.24 - _uid=0100007FD2CE6A6A889867AE02880D03 - 200 MISS - - [30/Jul/2026:06:17:11 +0000] "GET /sitemap_index.xml HTTP/1.1" 1169 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "216.73.217.24, 216.73.217.24, 216.73.217.24, 216.73.217.24" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:06:19:52 +0000] "POST /wp-cron.php?doing_wp_cron=1785392392.1992719173431396484375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:06:19:53 +0000] "POST /wp-cron.php?doing_wp_cron=1785392392.8905110359191894531250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:06:19:54 +0000] "POST /wp-cron.php?doing_wp_cron=1785392393.8744258880615234375000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 84.75.220.158 - - - 500 MISS - - [30/Jul/2026:06:19:54 +0000] "GET / HTTP/1.1" 3562 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "84.75.220.158, 84.75.220.158, 84.75.220.158, 84.75.220.158" 51.68.111.218 - - - 200 BYPASS - - [30/Jul/2026:06:21:35 +0000] "GET / HTTP/1.1" 241 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" "51.68.111.218, 51.68.111.218, 51.68.111.218, 51.68.111.218" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:06:34:14 +0000] "POST /wp-cron.php?doing_wp_cron=1785393253.9058868885040283203125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 43.130.16.140 - - - 500 MISS - - [30/Jul/2026:06:34:14 +0000] "GET / HTTP/1.1" 3562 "http://redlightinflammation.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "43.130.16.140, 43.130.16.140, 43.130.16.140, 43.130.16.140" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:07:15:30 +0000] "POST /wp-cron.php?doing_wp_cron=1785395729.5933980941772460937500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 99.239.225.143 - - - 200 MISS - - [30/Jul/2026:07:15:30 +0000] "GET /post-sitemap.xml HTTP/1.1" 2030 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_7_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.98 Safari/537.36" "99.239.225.143, 99.239.225.143, 99.239.225.143, 99.239.225.143" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:07:17:23 +0000] "POST /wp-cron.php?doing_wp_cron=1785395842.9033999443054199218750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 170.106.167.214 - - - 500 MISS - - [30/Jul/2026:07:17:23 +0000] "GET / HTTP/1.1" 3562 "https://www.redlightinflammation.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "170.106.167.214, 170.106.167.214, 170.106.167.214, 170.106.167.214" 20.104.16.169 - - - 403 BYPASS - - [30/Jul/2026:07:18:29 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 385 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:07:18:32 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 432 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007FA6DE6A6A869867AE02064303 - 404 HIT - - [30/Jul/2026:07:18:34 +0000] "GET /xstelth.php HTTP/1.1" 344 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007FA6DE6A6A869867AE02064303 - 404 MISS - - [30/Jul/2026:07:18:36 +0000] "GET /584062352875874akp.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007FA6DE6A6A869867AE02064303 - 404 MISS - - [30/Jul/2026:07:18:39 +0000] "GET /newfile.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007FA6DE6A6A869867AE02064303 - 404 MISS - - [30/Jul/2026:07:18:41 +0000] "GET /tBEZGQz.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:07:18:45 +0000] "POST /wp-cron.php?doing_wp_cron=1785395925.1048638820648193359375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 20.104.16.169 - _uid=0100007FA6DE6A6A869867AE02064303 - 500 MISS - - [30/Jul/2026:07:18:45 +0000] "GET /phpinfo?re@=vo@ HTTP/1.1" 3295 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007FA6DE6A6A869867AE02064303 - 404 MISS - - [30/Jul/2026:07:18:47 +0000] "GET //drykl.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007FA6DE6A6A869867AE02064303 - 403 BYPASS - - [30/Jul/2026:07:18:48 +0000] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 297 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007FA6DE6A6A869867AE02064303 - 404 MISS - - [30/Jul/2026:07:18:50 +0000] "GET /ls.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007FA6DE6A6A869867AE02064303 - 404 MISS - - [30/Jul/2026:07:18:52 +0000] "GET /dx.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007FA6DE6A6A869867AE02064303 - 404 HIT - - [30/Jul/2026:07:18:53 +0000] "GET /mac.php HTTP/1.1" 344 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007FA6DE6A6A869867AE02064303 - 404 MISS - - [30/Jul/2026:07:18:56 +0000] "GET /485.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007FA6DE6A6A869867AE02064303 - 404 MISS - - [30/Jul/2026:07:18:57 +0000] "GET /gelio1.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007FA6DE6A6A869867AE02064303 - 404 MISS - - [30/Jul/2026:07:18:59 +0000] "GET /lp6.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007FA6DE6A6A869867AE02064303 - 404 BYPASS - - [30/Jul/2026:07:19:00 +0000] "GET /wp-admin/maint/admin.php HTTP/1.1" 299 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007FA6DE6A6A869867AE02064303 - 403 BYPASS - - [30/Jul/2026:07:19:01 +0000] "GET /wp-includes/sodium_compat/ HTTP/1.1" 297 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007FA6DE6A6A869867AE02064303 - 404 MISS - - [30/Jul/2026:07:19:02 +0000] "GET /w3llscc.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007FA6DE6A6A869867AE02064303 - 404 MISS - - [30/Jul/2026:07:19:04 +0000] "GET /miru3.php?p= HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007FA6DE6A6A869867AE02064303 - 404 MISS - - [30/Jul/2026:07:19:05 +0000] "GET /autoload_classmap.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F4CA46A6A869867AE02061503 - 403 BYPASS - - [30/Jul/2026:07:19:06 +0000] "GET /wp-content/ HTTP/1.1" 297 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F4CA46A6A869867AE02061503 - 403 BYPASS - - [30/Jul/2026:07:19:08 +0000] "GET /wp-content/themes/index.php HTTP/1.1" 297 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F4CA46A6A869867AE02061503 - 404 HIT - - [30/Jul/2026:07:19:09 +0000] "GET //av.php HTTP/1.1" 344 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F4CA46A6A869867AE02061503 - 403 BYPASS - - [30/Jul/2026:07:19:10 +0000] "GET //wp-includes/l10n/ HTTP/1.1" 297 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F4CA46A6A869867AE02061503 - 500 BYPASS - - [30/Jul/2026:07:19:12 +0000] "GET /wordpress/wp-admin/maint/ HTTP/1.1" 3308 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F4CA46A6A869867AE02061503 - 404 MISS - - [30/Jul/2026:07:19:13 +0000] "GET /tiny.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F4CA46A6A869867AE02061503 - 404 MISS - - [30/Jul/2026:07:19:17 +0000] "GET /BsMPQ6Wavdefault.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:07:19:20 +0000] "GET /zrrhj.php HTTP/1.1" 433 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:07:19:24 +0000] "GET /gwaih1gfzp5vuwr04Cdefault.php HTTP/1.1" 433 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:07:19:27 +0000] "GET /wpgum.php HTTP/1.1" 433 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:07:19:29 +0000] "GET /ywwbf.php HTTP/1.1" 433 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:07:19:31 +0000] "GET /xoldj.php HTTP/1.1" 433 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:07:19:32 +0000] "GET //f35.php HTTP/1.1" 433 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:07:19:33 +0000] "GET /gk.php HTTP/1.1" 433 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:07:19:41 +0000] "GET /wper3.php HTTP/1.1" 433 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [30/Jul/2026:07:19:43 +0000] "GET /bthil.php HTTP/1.1" 432 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:07:19:45 +0000] "GET /wyzer1.php HTTP/1.1" 433 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:07:19:46 +0000] "GET /mh.php HTTP/1.1" 433 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:07:19:46 +0000] "GET /gvg1bvpsgtot1rpklCdefault.php HTTP/1.1" 433 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:07:19:48 +0000] "GET /1.php HTTP/1.1" 433 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F9CBA6A6A889867AE02770B03 - 404 MISS - - [30/Jul/2026:07:19:49 +0000] "GET /chosen.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F37D66A6A889867AE02460E03 - 404 MISS - - [30/Jul/2026:07:19:50 +0000] "GET /sd.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F37D66A6A889867AE02460E03 - 404 MISS - - [30/Jul/2026:07:19:51 +0000] "GET /z60.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F37D66A6A889867AE02460E03 - 404 MISS - - [30/Jul/2026:07:19:52 +0000] "GET /home.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F37D66A6A889867AE02460E03 - 404 MISS - - [30/Jul/2026:07:19:53 +0000] "GET /ws58.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F37D66A6A889867AE02460E03 - 404 MISS - - [30/Jul/2026:07:19:55 +0000] "GET /gulu.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F37D66A6A889867AE02460E03 - 404 MISS - - [30/Jul/2026:07:19:57 +0000] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F37D66A6A889867AE02460E03 - 404 MISS - - [30/Jul/2026:07:19:59 +0000] "GET /wpls.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F37D66A6A889867AE02460E03 - 404 MISS - - [30/Jul/2026:07:20:00 +0000] "GET /php.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F9FBA6A6A869867AE027D2B03 - 404 MISS - - [30/Jul/2026:07:20:02 +0000] "GET /100.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F9EBA6A6A869867AE027A2B03 - 404 MISS - - [30/Jul/2026:07:20:03 +0000] "GET /BDKR28WP.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:07:20:05 +0000] "GET /browse.php HTTP/1.1" 433 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:07:20:07 +0000] "GET /wp-good.php HTTP/1.1" 433 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F27FB6A6A869867AE02075903 - 404 MISS - - [30/Jul/2026:07:20:13 +0000] "GET /8573.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F27FB6A6A869867AE02075903 - 403 BYPASS - - [30/Jul/2026:07:20:14 +0000] "GET /wp-admin/install.php HTTP/1.1" 297 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F27FB6A6A869867AE02075903 - 404 MISS - - [30/Jul/2026:07:20:16 +0000] "GET /classwithtostring.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F98BA6A6A869867AE02642B03 - 404 MISS - - [30/Jul/2026:07:20:17 +0000] "GET /ohct.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:07:20:18 +0000] "GET /bless.php HTTP/1.1" 433 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007FED6F6A6A8BF0B71F0277D403 - 404 HIT - - [30/Jul/2026:07:20:20 +0000] "GET /about.php HTTP/1.1" 344 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007FED6F6A6A8BF0B71F0277D403 - 404 MISS - - [30/Jul/2026:07:20:21 +0000] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:07:20:22 +0000] "GET /ta0ol.php HTTP/1.1" 433 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:07:20:24 +0000] "POST /wp-cron.php?doing_wp_cron=1785396023.7143959999084472656250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:07:20:24 +0000] "POST /wp-cron.php?doing_wp_cron=1785396024.3455588817596435546875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:07:20:25 +0000] "POST /wp-cron.php?doing_wp_cron=1785396025.2092230319976806640625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 20.104.16.169 - - - 500 MISS - - [30/Jul/2026:07:20:25 +0000] "GET /sa.php7 HTTP/1.1" 3383 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F39FB6A6A869867AE02155903 - 404 MISS - - [30/Jul/2026:07:20:26 +0000] "GET /wp-class.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F39FB6A6A869867AE02155903 - 404 HIT - - [30/Jul/2026:07:20:27 +0000] "GET /8.php HTTP/1.1" 344 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F39FB6A6A869867AE02155903 - 404 MISS - - [30/Jul/2026:07:20:28 +0000] "GET /bootstrap.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F39FB6A6A869867AE02155903 - 404 HIT - - [30/Jul/2026:07:20:30 +0000] "GET /wp-blog-header.php HTTP/1.1" 294 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F39FB6A6A869867AE02155903 - 404 MISS - - [30/Jul/2026:07:20:36 +0000] "GET /aa.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F98BA6A6A869867AE02632B03 - 404 MISS - - [30/Jul/2026:07:20:40 +0000] "GET /tx79.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F98BA6A6A869867AE02632B03 - 404 MISS - - [30/Jul/2026:07:20:42 +0000] "GET /motu.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F98BA6A6A869867AE02632B03 - 404 MISS - - [30/Jul/2026:07:20:45 +0000] "GET /wp-head.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 37.27.122.165 - _uid=0100007F98BA6A6A869867AE02632B03 - 200 BYPASS - - [30/Jul/2026:07:20:52 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=cc45ff7698 HTTP/1.1" 153 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 20.104.16.169 - _uid=0100007F98BA6A6A869867AE02632B03 - 302 BYPASS - - [30/Jul/2026:07:20:52 +0000] "GET /wp-admin/options-privacy.php HTTP/1.1" 526 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F98BA6A6A869867AE02632B03 - 200 BYPASS - - [30/Jul/2026:07:20:53 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightinflammation.com%2Fwp-admin%2Foptions-privacy.php&reauth=1 HTTP/1.1" 4802 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F98BA6A6A869867AE02632B03 - 404 MISS - - [30/Jul/2026:07:20:55 +0000] "GET /60856e3a4findex.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F98BA6A6A869867AE02632B03 - 404 MISS - - [30/Jul/2026:07:20:56 +0000] "GET /wp-the.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F98BA6A6A869867AE02632B03 - 404 MISS - - [30/Jul/2026:07:20:57 +0000] "GET /wp.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F9BBA6A6A869867AE026C2B03 - 404 MISS - - [30/Jul/2026:07:20:59 +0000] "GET /users.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F9BBA6A6A869867AE026C2B03 - 404 MISS - - [30/Jul/2026:07:21:00 +0000] "GET /tinysd.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F9BBA6A6A869867AE026C2B03 - 404 MISS - - [30/Jul/2026:07:21:01 +0000] "GET /ws78.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F9BBA6A6A869867AE026C2B03 - 404 MISS - - [30/Jul/2026:07:21:02 +0000] "GET /elp.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007F42A46A6A869867AE02E81403 - 404 MISS - - [30/Jul/2026:07:21:03 +0000] "GET /atomlib.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - _uid=0100007FA2BA6A6A869867AE02912B03 - 404 MISS - - [30/Jul/2026:07:21:04 +0000] "GET /wyzer3.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:07:21:05 +0000] "GET /max.php HTTP/1.1" 433 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [30/Jul/2026:07:21:07 +0000] "GET /ftde.php HTTP/1.1" 433 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:07:29:14 +0000] "POST /wp-cron.php?doing_wp_cron=1785396554.0658600330352783203125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:08:18:10 +0000] "POST /wp-cron.php?doing_wp_cron=1785399489.9357171058654785156250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 184.168.126.180 - - - 200 BYPASS - - [30/Jul/2026:08:18:10 +0000] "GET /wp-login.php HTTP/1.1" 2820 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "184.168.126.180, 184.168.126.180, 184.168.126.180, 184.168.126.180" 184.168.126.180 - _uid=0100007FC2086B6A869867AE029E6203 - 200 BYPASS - - [30/Jul/2026:08:18:18 +0000] "POST /wp-login.php HTTP/1.1" 2855 "https://redlightinflammation.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "184.168.126.180, 184.168.126.180, 184.168.126.180, 184.168.126.180" 216.73.217.24 - _uid=0100007FD2CE6A6A889867AE02880D03 - 200 HIT - - [30/Jul/2026:08:21:23 +0000] "GET /sitemap_index.xml HTTP/1.1" 1149 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "216.73.217.24, 216.73.217.24, 216.73.217.24, 216.73.217.24" 47.82.10.49 - - - 200 HIT - - [30/Jul/2026:08:32:18 +0000] "GET /sitemap_index.xml HTTP/1.1" 1237 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" "47.82.10.49, 47.82.10.49, 47.82.10.49, 47.82.10.49" 47.82.10.49 - - - 200 HIT - - [30/Jul/2026:08:32:22 +0000] "GET /post-sitemap.xml HTTP/1.1" 2011 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" "47.82.10.49, 47.82.10.49, 47.82.10.49, 47.82.10.49" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:08:32:23 +0000] "POST /wp-cron.php?doing_wp_cron=1785400343.2862379550933837890625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 47.82.10.49 - - - 200 MISS - - [30/Jul/2026:08:32:23 +0000] "GET /page-sitemap.xml HTTP/1.1" 4377 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" "47.82.10.49, 47.82.10.49, 47.82.10.49, 47.82.10.49" 47.82.10.49 - - - 200 MISS - - [30/Jul/2026:08:32:25 +0000] "GET /category-sitemap.xml HTTP/1.1" 1520 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" "47.82.10.49, 47.82.10.49, 47.82.10.49, 47.82.10.49" 47.82.10.49 - - - 200 MISS - - [30/Jul/2026:08:32:26 +0000] "GET /local-sitemap.xml HTTP/1.1" 837 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" "47.82.10.49, 47.82.10.49, 47.82.10.49, 47.82.10.49" 37.27.122.165 - - - 200 BYPASS - - [30/Jul/2026:08:45:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785401103.3529419898986816406250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightinflammation.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 45.92.108.143 - - - 200 BYPASS - - [30/Jul/2026:08:45:04 +0000] "GET /wp-login.php HTTP/1.1" 2820 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "45.92.108.143, 45.92.108.143, 45.92.108.143, 45.92.108.143" 45.92.108.143 - _uid=0100007F100F6B6A869867AE02276603 - 200 BYPASS - - [30/Jul/2026:08:45:04 +0000] "POST /wp-login.php HTTP/1.1" 2855 "https://redlightinflammation.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "45.92.108.143, 45.92.108.143, 45.92.108.143, 45.92.108.143" 94.26.106.162 - - - 200 BYPASS - - [30/Jul/2026:08:57:12 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 241 "-" "python-requests/2.34.2" "94.26.106.162, 94.26.106.162, 94.26.106.162, 94.26.106.162"
修改文件时间
将文件时间修改为当前时间的前一年
删除文件